USN-6334-1: atftp vulnerabilities
Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2020-6097) Andreas B. Mundt discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2021-41054) Johannes Krupp discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server and make the server to disclose /etc/group data. (CVE-2021-46671)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this advisory?
CVE-2020-6097
How can a remote attacker exploit this vulnerability?
By sending a specially crafted tftp request to the server.
What is the remedy version for Ubuntu 20.04?
0.7.git20120829-3.1ubuntu0.1
What is the remedy version for Ubuntu 18.04?
0.7.git20120829-3.1~0.18.04.1+esm1
What is the remedy version for Ubuntu 16.04?
0.7.git20120829-3.1~0.16.04.1+esm1