Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3237-1

Опубликовано: 27 сент. 2021
Источник: suse-cvrf

Описание

Security update for atftp

This update for atftp fixes the following issues:

  • CVE-2021-41054: Fixed buffer overflow caused by combination of data, OACK, and other options (bsc#1190522).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
atftp-0.7.0-160.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
atftp-0.7.0-160.11.1

Описание

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:atftp-0.7.0-160.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:atftp-0.7.0-160.11.1

Ссылки