CVE-2019-11366: Null Pointer Dereference
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the threadlistmutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If threaddata is NULL when assigned to current, and modified by another thread before a certain tftpdlist.c check, there is a crash when dereferencing current->next.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-11366?
CVE-2019-11366 is a vulnerability discovered in atftpd in atftp 0.7.1 that allows for a denial of service attack due to a NULL pointer dereference.
What is the severity of CVE-2019-11366?
CVE-2019-11366 has a severity score of 5.9, which is considered medium.
How does CVE-2019-11366 affect the atftp package?
CVE-2019-11366 affects atftp versions 0.7.git20120829-3.2~deb10u3, 0.7.git20120829-3.3+deb11u2, and 0.8.0-3.
How can CVE-2019-11366 be fixed on Debian and Ubuntu systems?
Debian users should update to version 0.7.git20120829-3.2~deb10u3 or 0.7.git20120829-3.3+deb11u2, while Ubuntu users should update to version 0.7.20120829-3.1~0.18.04.1 for Bionic Beaver or 0.7.20120829-3.1~0.16.04.1 for Xenial Xerus.
What is the CWE ID for CVE-2019-11366?
CVE-2019-11366 is associated with CWE ID 476.