Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-2319

Высокий

ALT-PU-2024-2319: package atftp update to version 0.8.0-alt2

Источник
errata.altlinux.org
Дата публикации
14.02.2024
Дата обновления
14.02.2024
Устраненные уязвимости
4

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades atftp to version 0.8.0-alt2.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 7.5
altlinux
почти 3 года назад

ALT-PU-2024-1855: package `atftp` update to version 0.8.0-alt1

CVSS3: 5.3
ubuntu
почти 5 лет назад

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

CVSS3: 5.3
nvd
почти 5 лет назад

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

CVSS3: 5.3
debian
почти 5 лет назад

options.c in atftp before 0.7.5 reads past the end of an array, and co ...

CVSS3: 7.5
ubuntu
около 5 лет назад

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.