Описание
Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.65 (включая)
cpe:2.3:a:open_tftp_server_project:open_tftp_server:*:*:*:*:mt:*:*:*
EPSS
Процентиль: 81%
0.02257
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-134
Связанные уязвимости
github
около 4 лет назад
Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.
EPSS
Процентиль: 81%
0.02257
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-134