{"id":"CVE-2021-46671","aliases":["DEBIAN-CVE-2021-46671","DLA-3028-1","EUVD-2021-33347","GHSA-8982-hm8r-945r","SUSE-SU-2022:0881-1","UBUNTU-CVE-2021-46671","USN-6334-1"],"status":"published","title":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server...","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01267,"percentile":0.6996,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-02-04T20:13:47Z","modified":"2026-10-23T18:04:17Z","fixes":[{"ecosystem":"Debian:12","package":"atftp","fixed_in":["0.7.git20210915-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"atftp","fixed_in":["0.7.git20210915-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"atftp","fixed_in":["0.7.git20210915-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"atftp","fixed_in":["0.7.git20120829-3.1~deb9u3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"atftp","fixed_in":["0.7.0-160.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"atftp","fixed_in":["0.7.0-160.14.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"atftp","fixed_in":["0.7.git20120829-3.1~0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"atftp","fixed_in":["0.7.git20120829-3.1~0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"atftp","fixed_in":["0.7.git20120829-3.1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20210915-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20210915-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20210915-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~deb9u3"}]}],"versions":["0.7.git20120829-3","0.7.git20120829-3.1~deb9u1","0.7.git20120829-3.1~deb9u2"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-160.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-160.14.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.16.04.1+esm1"}]}],"versions":["0.7.git20120829-2.1","0.7.git20120829-3.1~0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.18.04.1+esm1"}]}],"versions":["0.7.git20120829-3","0.7.git20120829-3.1~0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1ubuntu0.1"}]}],"versions":["0.7.git20120829-3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.16.04.1+esm1"}]}],"versions":["0.7.git20120829-2.1","0.7.git20120829-3.1~0.16.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1~0.18.04.1+esm1"}]}],"versions":["0.7.git20120829-3","0.7.git20120829-3.1~0.18.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"atftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.git20120829-3.1ubuntu0.1"}]}],"versions":["0.7.git20120829-3.1"],"bundled":3}],"products":[{"vendor":"atftp_project","product":"atftp"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://sourceforge.net/p/atftp/code/ci/9cf799c40738722001552618518279e9f0ef62e5","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://bugs.debian.org/1004974","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00040.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46671"},{"url":"https://github.com/advisories/GHSA-8982-hm8r-945r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-46671","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220881-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1195619","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46671","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-46671","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6334-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41054","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-46671","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-04T20:13:47Z","modified":"2024-08-04T05:17:41.579Z","updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33347","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-04T20:13:47Z","modified":"2024-08-04T05:17:41Z","updated_at":"2026-11-03T03:08:22.448202Z"}],"ghsa":[{"id":"GHSA-8982-hm8r-945r","title":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server...","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-10T00:00:50Z","modified":"2023-02-03T05:05:31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:53:45.336505Z"}],"nvd":[{"id":"CVE-2021-46671","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-04T21:15:08.057Z","modified":"2026-06-17T04:15:22.213Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:04.178977Z"}],"osv":[{"id":"CVE-2021-46671","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-04T21:15:08.057Z","modified":"2026-03-14T01:44:06.737046Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-46671","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-04T21:15:08.057Z","modified":"2026-10-23T18:04:17.624670931Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"UBUNTU-CVE-2021-46671","description":"options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.","status":"published","published":"2022-02-04T21:15:00Z","modified":"2026-02-05T08:13:57.255385Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"DLA-3028-1","title":"atftp - security update","status":"published","published":"2022-05-27T00:00:00Z","modified":"2026-03-09T01:19:28.685245Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"SUSE-SU-2022:0881-1","title":"Security update for atftp","description":"This update for atftp fixes the following issues:\n\t \n-  CVE-2021-46671: Fixed a potential information leak in atftpd (bsc#1195619). \n","status":"published","published":"2022-03-16T13:43:43Z","modified":"2026-02-04T03:31:47.951461Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-6334-1","title":"atftp vulnerabilities","description":"Peter Wang discovered that atftp did not properly manage certain inputs. A\nremote attacker could send a specially crafted tftp request to the server\nto cause a crash. (CVE-2020-6097) \n\nAndreas B. Mundt discovered that atftp did not properly manage certain\ninputs. A remote attacker could send a specially crafted tftp request to\nthe server to cause a crash. (CVE-2021-41054) \n\nJohannes Krupp discovered that atftp did not properly manage certain\ninputs. A remote attacker could send a specially crafted tftp request to\nthe server and make the server to disclose /etc/group data.\n(CVE-2021-46671) \n","status":"published","published":"2023-09-04T10:25:21Z","modified":"2026-06-25T13:32:17.581593302Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}