Поиск уязвимостей
Количество 8
Количество 8
CVE-2019-11366
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
CVE-2019-11366
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
CVE-2019-11366
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the ...
GHSA-4hq6-rhmw-hgw9
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
BDU:2019-01954
Уязвимость функции thread_list_mutex продвинутого TFTP-сервера Atftpd, связанная с разыменованием указателя NULL, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2019:14033-1
Security update for atftp
SUSE-SU-2019:1091-1
Security update for atftp
ALT-PU-2020-3133
ALT-PU-2020-3133: package `atftp` update to version 0.7.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-11366 An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next. | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-11366 An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next. | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
| CVE-2019-11366 An issue was discovered in atftpd in atftp 0.7.1. It does not lock the ... | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
| GHSA-4hq6-rhmw-hgw9 An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next. | 2% Низкий | больше 4 лет назад | |
 | BDU:2019-01954 Уязвимость функции thread_list_mutex продвинутого TFTP-сервера Atftpd, связанная с разыменованием указателя NULL, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
 | SUSE-SU-2019:14033-1 Security update for atftp | больше 7 лет назад | ||
| SUSE-SU-2019:1091-1 Security update for atftp | больше 7 лет назад | ||
| ALT-PU-2020-3133 ALT-PU-2020-3133: package `atftp` update to version 0.7.2-alt1 | CVSS3: 9.8 | около 6 лет назад |
Уязвимостей на страницу