atftp Project atftp 0.7.1
Approved changes feed: RSS · Atom
cpe:2.3:a:atftp_project:atftp:0.7.1:*:*:*:*:*:*:*
part: a version: 0.7.1 update: *
| Vendor | Atftp Project (6385ee46-b6d8-5db6-87b5-223bb4147a20) |
|---|---|
| Product | Atftp (9eb02986-b866-5680-89cd-de701c5f183d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/atftp |
purl2cpe | 2026-06-01 10:18:09.566183 |
pkg:deb/ubuntu/atftp |
purl2cpe | 2026-06-01 10:18:09.566186 |
pkg:github/seveas/atftp |
purl2cpe | 2026-06-01 10:18:09.566190 |
pkg:rpm/opensuse/atftp |
purl2cpe | 2026-06-01 10:18:09.566192 |
pkg:sourceforge/atftp |
purl2cpe | 2026-06-01 10:18:09.566195 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11366 |
vulnerable | 2026-06-08 05:12:37.079918 |
Details available
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
Published: 2019-04-20T12:58:09.000Z
Updated: 2024-08-04T22:48:09.221Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11365 |
vulnerable | 2026-06-08 05:12:37.079415 |
Details available
An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this vulnerable strncpy pattern within the code base, specifically within tftpd_file.c, tftp_file.c, tftpd_mtftp.c, and tftp_mtftp.c.
Published: 2019-04-20T12:57:45.000Z
Updated: 2024-08-04T22:48:09.160Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.