AVG-2381 log

Package atftp
Status Fixed
Severity Medium
Type arbitrary code execution
Affected 0.7.4-1
Fixed 0.7.5-1
Current 0.7.5-1 [community]
Ticket None
Created Tue Sep 14 08:36:49 2021
Issue Severity Remote Type Description
CVE-2021-41054 Medium Yes Arbitrary code execution
tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.