{"id":"CVE-2021-41054","aliases":["DEBIAN-CVE-2021-41054","DLA-2820-1","EUVD-2021-28205","GHSA-pjhr-q582-mpq7","SUSE-SU-2021:3237-1","UBUNTU-CVE-2021-41054","USN-6334-1","openSUSE-SU-2024:10636-1"],"status":"published","title":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not...","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02337,"percentile":0.83834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2021-09-13T20:43:53Z","modified":"2026-10-23T18:03:28Z","fixes":[{"ecosystem":"Debian:12","package":"atftp","fixed_in":["0.7.git20210915-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"atftp","fixed_in":["0.7.git20210915-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"atftp","fixed_in":["0.7.git20210915-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"atftp","fixed_in":["0.7.0-160.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"atftp","fixed_in":["0.7.0-160.11.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"atftp","fixed_in":["0.7.git20120829-3.1~0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"atftp","fixed_in":["0.7.git20120829-3.1~0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"atftp","fixed_in":["0.7.git20120829-3.1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20210915-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20210915-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20210915-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~deb9u2"}]}],"versions":["0.7.git20120829-3","0.7.git20120829-3.1~deb9u1"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-160.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-160.11.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.16.04.1+esm1"}]}],"versions":["0.7.git20120829-2.1","0.7.git20120829-3.1~0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.18.04.1+esm1"}]}],"versions":["0.7.git20120829-3","0.7.git20120829-3.1~0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1ubuntu0.1"}]}],"versions":["0.7.git20120829-3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.16.04.1+esm1"}]}],"versions":["0.7.git20120829-2.1","0.7.git20120829-3.1~0.16.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.18.04.1+esm1"}]}],"versions":["0.7.git20120829-3","0.7.git20120829-3.1~0.18.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1ubuntu0.1"}]}],"versions":["0.7.git20120829-3.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.5-1.1"}]}],"bundled":3}],"products":[{"vendor":"atftp_project","product":"atftp"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://sourceforge.net/p/atftp/code/ci/d255bf90834fb45be52decf9bc0b4fb46c90f205/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41054","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00014.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41054"},{"url":"https://github.com/advisories/GHSA-pjhr-q582-mpq7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41054","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213237-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190522","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41054","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-41054","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6334-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-46671","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6097","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-41054","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2021-09-13T20:43:53Z","modified":"2024-08-04T02:59:31.065Z","updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28205","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2021-09-13T20:43:53Z","modified":"2024-08-04T02:59:31Z","updated_at":"2026-11-03T03:24:18.784846Z"}],"ghsa":[{"id":"GHSA-pjhr-q582-mpq7","title":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not...","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2022-05-24T19:14:15Z","modified":"2023-01-30T05:02:11Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:46:35.225326Z"}],"nvd":[{"id":"CVE-2021-41054","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2021-09-13T21:15:09.65Z","modified":"2026-06-17T04:07:48.023Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:58.502206Z"}],"osv":[{"id":"CVE-2021-41054","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2021-09-13T21:15:09.65Z","modified":"2026-03-14T11:11:06.133164Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-41054","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2021-09-13T21:15:09.65Z","modified":"2026-10-23T18:03:28.219906755Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"UBUNTU-CVE-2021-41054","description":"tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.","status":"published","published":"2021-09-13T21:15:00Z","modified":"2026-02-04T03:29:31.29691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DLA-2820-1","title":"atftp - security update","status":"published","published":"2021-11-17T00:00:00Z","modified":"2026-03-09T01:22:39.877403Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2024:10636-1","title":"atftp-0.7.5-1.1 on GA media","description":"These are all security issues fixed in the atftp-0.7.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:47.713422Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:3237-1","title":"Security update for atftp","description":"This update for atftp fixes the following issues:\n\n- CVE-2021-41054: Fixed buffer overflow caused by combination of data, OACK, and other options (bsc#1190522).\n","status":"published","published":"2021-09-27T14:38:01Z","modified":"2025-05-02T04:10:52.690346Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-6334-1","title":"atftp vulnerabilities","description":"Peter Wang discovered that atftp did not properly manage certain inputs. A\nremote attacker could send a specially crafted tftp request to the server\nto cause a crash. (CVE-2020-6097) \n\nAndreas B. Mundt discovered that atftp did not properly manage certain\ninputs. A remote attacker could send a specially crafted tftp request to\nthe server to cause a crash. (CVE-2021-41054) \n\nJohannes Krupp discovered that atftp did not properly manage certain\ninputs. A remote attacker could send a specially crafted tftp request to\nthe server and make the server to disclose /etc/group data.\n(CVE-2021-46671) \n","status":"published","published":"2023-09-04T10:25:21Z","modified":"2026-06-25T13:32:17.581593302Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}