{"action":"Upgrade atftp to 0.7.git20210915-1 or later.","affected":[{"fixed":"0.7.git20210915-1","introduced":"0"}],"component":"atftp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.7.git20210915-1"],"id":"tcs_01M5NFZTENZ5QJ0RH9YX3XEVK0","modified_at":"2026-10-23T18:03:28.219906755Z","published_at":"2021-09-13T21:15:09.650Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-41054","https://security-tracker.debian.org/tracker/CVE-2021-41054"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-41054#Debian:14/atftp","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-41054"}],"summary":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options."}