Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Open Tftp Server Project Component: Open Tftp Server Clear all filters
TI-2019-09382 CVE-2019-12568 · GHSA-r8qp-cm8p-5ph7

Stack-based overflow vulnerability in the logMess function in Open TFTP Server SP 1.66…

Priority MEDIUM 46

Stack-based overflow vulnerability in the logMess function in Open TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP error packet, a differen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02257 Published 2019-12-23 No fix listed CWE-787
TI-2019-09381 CVE-2019-12567 · GHSA-3vvp-wwgp-m9wm

Stack-based overflow vulnerability in the logMess function in Open TFTP Server MT 1.65…

Priority MEDIUM 46

Stack-based overflow vulnerability in the logMess function in Open TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP error packet, a differen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02257 Published 2019-12-23 No fix listed CWE-787
TI-2018-07356 CVE-2018-10389 · GHSA-2wx8-6jj8-chhc

Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier…

Priority MEDIUM 46

Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02257 Published 2019-12-23 No fix listed CWE-134
TI-2018-07354 CVE-2018-10387 · GHSA-8x28-7c5h-458j

Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote…

Priority MEDIUM 47

Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02864 Published 2019-12-23 No fix listed CWE-787