Debian/atftp: medium 5.9
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of
Action: Upgrade atftp to 0.7.git20120829-3.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.git20120829-3.1 | - |
Fixed versions
| 0.7.git20120829-3.1 |
Sources
- osv: DEBIAN-CVE-2019-11366#Debian:13/atftp
- https://security-tracker.debian.org/tracker/CVE-2019-11366
published · modified · JSON