Описание
Security update for atftp
This update for atftp fixes the following issues:
- CVE-2021-41054: Fixed buffer overflow caused by combination of data, OACK, and other options (bsc#1190522).
Список пакетов
SUSE Linux Enterprise Server 12 SP5
atftp-0.7.0-160.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
atftp-0.7.0-160.11.1
Ссылки
- Link for SUSE-SU-2021:3237-1
- E-Mail link for SUSE-SU-2021:3237-1
- SUSE Security Ratings
- SUSE Bug 1190522
- SUSE CVE CVE-2021-41054 page
Описание
tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:atftp-0.7.0-160.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:atftp-0.7.0-160.11.1
Ссылки
- CVE-2021-41054
- SUSE Bug 1190522