Vulnerabilities

TI-2021-21442 CVE-2021-46671 · GHSA-8982-hm8r-945r

options.c in atftp before 0.7.5 reads past the end of an array, and consequently…

LOW 27

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01267 Published 2022-02-04 No fix listed CWE-125

TI-2021-17908 CVE-2021-41054 · GHSA-pjhr-q582-mpq7

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling…

LOW 37

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02337 Published 2021-09-13 No fix listed CWE-120

TI-2020-04964 CVE-2020-6097 · GHSA-g854-fc3p-gq33

Reachable assertion in atftpd

LOW 37

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02154 Published 2020-09-10 No fix listed CWE-617

TI-2019-08488 CVE-2019-11366 · GHSA-4hq6-rhmw-hgw9

An issue was discovered in atftpd in atftp 0.7.1.

LOW 31

An issue was discovered in atftpd in atftp 0.7.1.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02098 Published 2019-04-20 No fix listed CWE-476

TI-2019-08487 CVE-2019-11365 · GHSA-4g6j-v9hp-3h66

An issue was discovered in atftpd in atftp 0.7.1.

MEDIUM 49

An issue was discovered in atftpd in atftp 0.7.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04288 Published 2019-04-20 No fix listed CWE-787

Vulnerabilities

Filters

options.c in atftp before 0.7.5 reads past the end of an array, and consequently…

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling…

Reachable assertion in atftpd

An issue was discovered in atftpd in atftp 0.7.1.

An issue was discovered in atftpd in atftp 0.7.1.