{"id":"CVE-2025-67433","aliases":["EUVD-2025-207242","GHSA-q6f4-2qxx-8cww"],"status":"published","title":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7...","description":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00464,"percentile":0.40714,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122"],"published":"2026-02-12T00:00:00Z","modified":"2026-06-17T09:57:39Z","references":[{"url":"https://gist.github.com/Hyobin/f1b7d48d29e60a378bb9c88ba8b8080a"},{"url":"https://sourceforge.net/projects/tftp-server/files/tftp%20server%20multithreaded/"},{"url":"https://gist.github.com/transparencybeam/f1b7d48d29e60a378bb9c88ba8b8080a"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67433"},{"url":"https://sourceforge.net/projects/tftp-server/files/tftp%20server%20multithreaded"},{"url":"https://github.com/advisories/GHSA-q6f4-2qxx-8cww"}],"sources":{"cve":[{"id":"CVE-2025-67433","description":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.","status":"published","published":"2026-02-12T00:00:00Z","modified":"2026-02-26T20:52:47.206Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:52.21763Z"}],"euvd":[{"id":"EUVD-2025-207242","description":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.","status":"published","published":"2026-02-12T00:00:00Z","modified":"2026-02-26T20:52:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:14.049749Z"}],"ghsa":[{"id":"GHSA-q6f4-2qxx-8cww","title":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7...","description":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.","status":"published","published":"2026-02-12T21:31:27Z","modified":"2026-02-27T00:32:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:06:24.001962Z"}],"nvd":[{"id":"CVE-2025-67433","description":"A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.","status":"published","published":"2026-02-12T20:16:02.877Z","modified":"2026-06-17T09:57:39.473Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:00.273026Z"}]}}