Debian/atftp: medium 5.3
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
Action: Upgrade atftp to 0.7.git20210915-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.git20210915-1 | - |
Fixed versions
| 0.7.git20210915-1 |
Sources
- osv: DEBIAN-CVE-2021-46671#Debian:13/atftp
- https://security-tracker.debian.org/tracker/CVE-2021-46671
published · modified · JSON