CVE-2021-41054: Buffer Overflow
tftpdfile.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/atftpto a version that resolves this vulnerability.Fixed in 0.7. - Upgrade
Upgrade
debian/atftpto a version that resolves this vulnerability.Fixed in 0.7.git20120829-3.2~deb10u3Fixed in 0.7.git20120829-3.3+deb11u2Fixed in 0.8.0-3
Event History
Frequently Asked Questions
What is CVE-2021-41054?
CVE-2021-41054 is a vulnerability in atftp through 0.7.4 that allows for a buffer overflow due to improper handling of buffer size.
What is the severity of CVE-2021-41054?
The severity of CVE-2021-41054 is not mentioned in the provided information.
How does CVE-2021-41054 affect atftp?
CVE-2021-41054 affects atftp versions up to and including 0.7.4.
How can I fix CVE-2021-41054?
To fix CVE-2021-41054, update atftp to version 0.7.5 or later, as recommended by the vendor.
Where can I find more information about CVE-2021-41054?
You can find more information about CVE-2021-41054 in the provided references: [link1], [link2], [link3].