atftp - Arch Linux
Resolved
| Group | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|
| AVG-2381 | 0.7.4-1 | 0.7.5-1 | Medium | Fixed | |
| AVG-1395 | 0.7.2-2 | 0.7.2-3 | Medium | Fixed | FS#69175 |
| Issue | Group | Severity | Remote | Type | Description |
|---|---|---|---|---|---|
| CVE-2021-41054 | AVG-2381 | Medium | Yes | Arbitrary code execution | tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options. |
| CVE-2020-6097 | AVG-1395 | Medium | Yes | Denial of service | An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.2. A specially crafted sequence of RRQ-Multicast... |
Advisories
| Date | Advisory | Group | Severity | Type |
|---|---|---|---|---|
| 12 Jan 2021 | ASA-202101-24 | AVG-1395 | Medium | denial of service |