Approved changes feed: RSS · Atom

cpe:2.3:a:atftp_project:atftp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAtftp Project (6385ee46-b6d8-5db6-87b5-223bb4147a20)
ProductAtftp (9eb02986-b866-5680-89cd-de701c5f183d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/atftp purl2cpe 2026-06-01 10:18:09.566185
pkg:deb/ubuntu/atftp purl2cpe 2026-06-01 10:18:09.566188
pkg:github/seveas/atftp purl2cpe 2026-06-01 10:18:09.566191
pkg:rpm/opensuse/atftp purl2cpe 2026-06-01 10:18:09.566194
pkg:sourceforge/atftp purl2cpe 2026-06-01 10:18:09.566196

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-46671 vulnerable 2026-06-08 05:38:03.695003 Details available
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
Published: 2022-02-04T20:13:47.000Z
Updated: 2024-08-04T05:17:41.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41054 vulnerable 2026-06-08 05:35:19.557427 Details available
tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.
Published: 2021-09-13T20:43:53.000Z
Updated: 2024-08-04T02:59:31.065Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.