Buffer Overflow Vulnerability in TFTP-HPA Software by Open Source
CVE-2011-2199

Currently unrated

Key Information:

Vendor: H Peter Anvin
Status: Tftp-HPa
Vendor: CVE Published:; 22 July 2012

🔔 Create H Peter Anvin Vulnerability Alert

What is CVE-2011-2199?

A buffer overflow vulnerability exists in TFTP-HPA versions prior to 5.1. This flaw can be exploited by remote attackers utilizing the 'utimeout' option, potentially allowing them to crash the service or execute arbitrary commands. This poses significant risks, including service disruptions and unauthorized access to the affected systems. Users of vulnerable versions are advised to upgrade to the latest secure release to mitigate these risks.

References

http://www.openwall.com/lists/oss-security/2011/06/13/11

mailing-listx_refsource_MLIST

http://security.gentoo.org/glsa/glsa-201206-12.xml

vendor-advisoryx_refsource_GENTOO

http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=co...

x_refsource_CONFIRM

EPSS Score

5% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 22, 2012
Vulnerability Reserved
May 31, 2011

CVE-2011-2199 Data

JSON