CVE-2021-46671: Medium severity atftp vulnerability
Published Feb 4, 2022
·Updated
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
Affected Software
9 affected componentsFixes available
debian/atftp
0.7.git20120829-3.2~deb10u30.7.git20120829-3.3+deb11u20.8.0-3
ubuntu/atftp<0.7.
0.7.
ubuntu/atftp<0.7.
0.7.
ubuntu/atftp<0.7.
0.7.
ubuntu/atftp<0.7.
0.7.
Atftp Project Atftp<0.7.5
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Remediation
Event History
Feb 4, 2022
CVE Published
12:00 AM
CVE Published
via MITRE·08:13 PM
Data Sourced
via MITRE·08:13 PM
Description
Sep 4, 2023
Data Sourced
11:51 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-46671.
2
What is the title of this vulnerability?
The title of this vulnerability is 'options.c in atftp before 0.7.5 reads past the end of an array and consequently discloses server-sid…'
3
What is the description of this vulnerability?
The description of this vulnerability is that options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
4
What software is affected by this vulnerability?
The software affected by this vulnerability is atftp version 0.7.
5
Is there a fix available for this vulnerability?
Yes, there is a fix available for this vulnerability.