ASA-202101-24 log generated external raw

[ASA-202101-24] atftp: denial of service
Arch Linux Security Advisory ASA-202101-24 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-6097 Package : atftp Type : denial of service Remote : Yes Link : Summary ======= The package atftp before version 0.7.2-3 is vulnerable to denial of service. Resolution ========== Upgrade to 0.7.2-3. # pacman -Syu "atftp>=0.7.2-3" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.2. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of- service. An attacker can send a sequence of malicious packets to trigger this vulnerability. Impact ====== A malicious remote user might crash the application by performing a sequence of crafted queries. References ==========