CVE-2021-46671

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server...

5.3 MediumFix available

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: None

Exploit likelihood

1.27%Up 0.4 points since Feb 8, 2022

What each source reports

NVD Score used 5.3

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: CVE-2021-46671
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: CVE-2021-46671
Updated: 2026-11-02

EUVDEUVD-2021-33347 No score

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: EUVD-2021-33347
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8982-hm8r-945r 5.3

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server...

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: GHSA-8982-hm8r-945r
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness: CWE-125
Updated: 2026-11-02

OSV 5.3

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: CVE-2021-46671
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2021-46671 5.3

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: DEBIAN-CVE-2021-46671
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-46671 5.3

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.

Record: UBUNTU-CVE-2021-46671
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVSUSE-SU-2022:0881-1 No score

Security update for atftp

This update for atftp fixes the following issues:

CVE-2021-46671: Fixed a potential information leak in atftpd (bsc#1195619).

Record: SUSE-SU-2022:0881-1
Updated: 2026-11-02

OSVUSN-6334-1 No score

atftp vulnerabilities

Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2020-6097)

Andreas B. Mundt discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2021-41054)

Johannes Krupp discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server and make the server to disclose /etc/group data. (CVE-2021-46671)

Record: USN-6334-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`atftp` Debian:12	before 0.7.git20210915-1	0.7.git20210915-1
`atftp` Debian:13	before 0.7.git20210915-1	0.7.git20210915-1
`atftp` Debian:14	before 0.7.git20210915-1	0.7.git20210915-1
`atftp` Debian:9	before 0.7.git20120829-3.1~deb9u3, plus listed versions 0.7.git20120829-30.7.git20120829-3.1~deb9u10.7.git20120829-3.1~deb9u2	0.7.git20120829-3.1~deb9u3
`atftp` SUSE:Linux Enterprise Server 12 SP5	before 0.7.0-160.14.1	0.7.0-160.14.1
`atftp` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 0.7.0-160.14.1	0.7.0-160.14.1
`atftp` Ubuntu:Pro:16.04:LTS	before 0.7.git20120829-3.1~0.16.04.1+esm1, plus listed versions 0.7.git20120829-2.10.7.git20120829-3.1~0.16.04.1	0.7.git20120829-3.1~0.16.04.1+esm1
`atftp` Ubuntu:Pro:18.04:LTS	before 0.7.git20120829-3.1~0.18.04.1+esm1, plus listed versions 0.7.git20120829-30.7.git20120829-3.1~0.18.04.1	0.7.git20120829-3.1~0.18.04.1+esm1
`atftp` Ubuntu:20.04:LTS	before 0.7.git20120829-3.1ubuntu0.1, plus listed versions 0.7.git20120829-3.1	0.7.git20120829-3.1ubuntu0.1
`atftp` Ubuntu:Pro:16.04:LTS From an advisory covering 3 CVEs	before 0.7.git20120829-3.1~0.16.04.1+esm1, plus listed versions 0.7.git20120829-2.10.7.git20120829-3.1~0.16.04.1	0.7.git20120829-3.1~0.16.04.1+esm1
`atftp` Ubuntu:Pro:18.04:LTS From an advisory covering 3 CVEs	before 0.7.git20120829-3.1~0.18.04.1+esm1, plus listed versions 0.7.git20120829-30.7.git20120829-3.1~0.18.04.1	0.7.git20120829-3.1~0.18.04.1+esm1
`atftp` Ubuntu:20.04:LTS From an advisory covering 3 CVEs	before 0.7.git20120829-3.1ubuntu0.1, plus listed versions 0.7.git20120829-3.1	0.7.git20120829-3.1ubuntu0.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-46671 is a medium vulnerability (CVSS 5.3) in Atftp Project Atftp, published February 4, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.27%, the 69th percentile. Fixed in atftp 0.7.git20210915-1.

References

Show 8 moreShow less