CVE-2021-46671

Reference Links

• https://bugs.debian.org/1004974
• https://sourceforge.net/p/atftp/code/ci/9cf799c40738722001552618518279e9f0ef62e5
• https://lists.debian.org/debian-lts-announce/2022/05/msg00040.html
• https://launchpad.net/bugs/cve/CVE-2021-46671
• https://security-tracker.debian.org/tracker/CVE-2021-46671
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46671
• https://sourceforge.net/p/atftp/code/ci/9cf799c40738722001552618518279e9f0ef62e5 (v0.7.5)
• https://ubuntu.com/security/notices/USN-6334-1
• https://nvd.nist.gov/vuln/detail/CVE-2021-46671
• https://ubuntu.com/security/CVE-2021-46671

Parent vulnerabilities

(Appears in the following advisories)

• USN-6334-1

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2021-46671.

• What is the title of this vulnerability?

  The title of this vulnerability is 'options.c in atftp before 0.7.5 reads past the end of an array and consequently discloses server-sid…'

• What is the description of this vulnerability?

  The description of this vulnerability is that options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

• What software is affected by this vulnerability?

  The software affected by this vulnerability is atftp version 0.7.

• Is there a fix available for this vulnerability?

  Yes, there is a fix available for this vulnerability.