- Vulnerability/
- USN-6334-1
USN-6334-1: atftp vulnerabilities
First published: Mon Sep 04 2023(Updated: )
Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2020-6097) Andreas B. Mundt discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2021-41054) Johannes Krupp discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server and make the server to disclose /etc/group data. (CVE-2021-46671)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/atftpd | <0.7.git20120829-3.1ubuntu0.1 | 0.7.git20120829-3.1ubuntu0.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/atftpd | <0.7.git20120829-3.1~0.18.04.1+esm1 | 0.7.git20120829-3.1~0.18.04.1+esm1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/atftpd | <0.7.git20120829-3.1~0.16.04.1+esm1 | 0.7.git20120829-3.1~0.16.04.1+esm1 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this advisory?
CVE-2020-6097
How can a remote attacker exploit this vulnerability?
By sending a specially crafted tftp request to the server.
What is the remedy version for Ubuntu 20.04?
0.7.git20120829-3.1ubuntu0.1
What is the remedy version for Ubuntu 18.04?
0.7.git20120829-3.1~0.18.04.1+esm1
What is the remedy version for Ubuntu 16.04?
0.7.git20120829-3.1~0.16.04.1+esm1
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04