|Category:||Ubuntu Local Security Checks|
|Title:||Ubuntu: Security Advisory for atftp (USN-4540-1)|
|Summary:||The remote host is missing an update for the 'atftp'; package(s) announced via the USN-4540-1 advisory.|
The remote host is missing an update for the 'atftp'
package(s) announced via the USN-4540-1 advisory.
Denis Andzakovic discovered that atftpd incorrectly handled certain
malformed packets. A remote attacker could send a specially crafted packet
to cause atftpd to crash, resulting in a denial of service.
Denis Andzakovic discovered that atftpd did not properly lock the thread
list mutex. An attacker could send a large number of tftpd packets
simultaneously when running atftpd in daemon mode to cause atftpd to
crash, resulting in a denial of service. (CVE-2019-11366)
'atftp' package(s) on Ubuntu 18.04 LTS.
Please install the updated package(s).
Common Vulnerability Exposure (CVE) ID: CVE-2019-11365|
Common Vulnerability Exposure (CVE) ID: CVE-2019-11366
|Copyright||Copyright (C) 2020 Greenbone Networks GmbH|
|This is only one of 85075 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.