CVE-2019-11366 An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of....
MediumCVSS 5.9
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/atftp(Debian:12) | < 0.7.git20120829-3.1 | 0.7.git20120829-3.1 |
| debian/atftp(Debian:13) | < 0.7.git20120829-3.1 | 0.7.git20120829-3.1 |
| debian/atftp(Debian:14) | < 0.7.git20120829-3.1 | 0.7.git20120829-3.1 |
| atftp project atftp | = 0.7.1 | No fix listed |
References
- Debian Security Tracker CVE-2019-11366 vendor-advisory
- [debian-lts-announce] 20190512 [SECURITY] [DLA 1783-1] atftp security update mailing-list
- pulsesecurity.co.nz exploit third-party-advisory
- 20190508 [SECURITY] [DSA 4438-1] atftp security update mailing-list
- GLSA-202003-14 vendor-advisory
- sourceforge.net patch third-party-advisory
- USN-4540-1 vendor-advisory
- DSA-4438 vendor-advisory
- bugs.debian.org issue-tracking