CVE-2021-41054

概要

参考情報

• nu11secur1ty/CVE-mitre · Exploit
• lists.debian.org/debian-lts-announce/2021/11/msg00014.html · Mailing List
• sourceforge.net/p/atftp/code/ci/d255bf90834fb45be52decf9bc0b4fb46c90f205 · Patch

atftp のその他の脆弱性

• CVE-2021-46671中 5.3options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
• CVE-2020-6097高 7.5An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafte…
• CVE-2019-11366中 5.9An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data stru…
• CVE-2019-11365緊急 9.8An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due t…