Описание
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 0.8.0-3 |
| esm-apps/bionic | released | 0.7.git20120829-3.1~0.18.04.1+esm1 |
| esm-apps/focal | released | 0.7.git20120829-3.1ubuntu0.1 |
| esm-apps/jammy | not-affected | 0.7.git20210915-4 |
| esm-apps/xenial | released | 0.7.git20120829-3.1~0.16.04.1+esm1 |
| esm-infra-legacy/trusty | DNE | |
| focal | released | 0.7.git20120829-3.1ubuntu0.1 |
| groovy | ignored | end of life |
| hirsute | ignored | end of life |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
An exploitable denial of service vulnerability exists in the atftpd da ...
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
Уязвимость функции assert() сервера atftpd, связанная с ошибками освобождения ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5 Medium
CVSS2
7.5 High
CVSS3