Описание
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.7.git20120829-3.1~0.18.04.1 |
| cosmic | ignored | end of life |
| devel | not-affected | 0.7.git20120829-3.1 |
| disco | ignored | end of life |
| eoan | not-affected | 0.7.git20120829-3.1 |
| esm-apps/bionic | released | 0.7.git20120829-3.1~0.18.04.1 |
| esm-apps/focal | not-affected | 0.7.git20120829-3.1 |
| esm-apps/xenial | released | 0.7.git20120829-3.1~0.16.04.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
| focal | not-affected | 0.7.git20120829-3.1 |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3
Связанные уязвимости
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the ...
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
Уязвимость функции thread_list_mutex продвинутого TFTP-сервера Atftpd, связанная с разыменованием указателя NULL, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3