CVE-2020-6097: High severity atftp vulnerability
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-6097.
What is the severity of CVE-2020-6097?
The severity of CVE-2020-6097 is not mentioned in the provided information.
Which software is affected by CVE-2020-6097?
The atftp software versions 0.7.git20120829-3.1+b1 and lower are affected by CVE-2020-6097.
How can CVE-2020-6097 be exploited?
CVE-2020-6097 can be exploited by sending a specially crafted sequence of RRQ-Multicast requests.
Is there a fix available for CVE-2020-6097?
Yes, there are remediation steps available to fix CVE-2020-6097, but the specifics are not mentioned in the provided information. It is recommended to follow the recommendations provided by the software vendor or relevant security advisories.