Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.05246·Published 2012-07-22·Will not fixCWE-119
tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap memory during jump label searches.
CVSS 4.0MEDIUM 6.3·Network·No auth·No interaction·EPSS 0.00368·Published 2026-10-06·Fixed in 6.0CWE-125
