CVE-2019-11366
atftp: An issue was discovered in atftpd in atftp 0.7.1
CVE-2019-11366 is fixed in 2 products on 1 platform, first by atftp 0.7.git20120829-3.1~0.18.04.1, released April 20, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0210
81st percentile
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| atftp · Ubuntu 18.04.6 LTS (bionic) | 0.7.git20120829-3.1~0.18.04.1 | atftp 0.7.git20120829-3.1~0.18.04.1 | Apr 20, 2019 |
| atftpd · Ubuntu 18.04.6 LTS (bionic) | 0.7.git20120829-3.1~0.18.04.1 | atftpd 0.7.git20120829-3.1~0.18.04.1 | Apr 20, 2019 |