CVE-2011-2199

Published: Jul 22, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.

Affected (1)

Products: H Peter Anvin: Tftp Hpa

H Peter Anvin

1 product

Tftp Hpa

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
H Peter Anvin Tftp Hpa	Up to 5.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=blob%3Bf=CHANGES%3Bh=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1%3Bhb=badf05140d3c2408715a73a52c0f35887e337c04

Source: secalert@redhat.com

http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=commitdiff%3Bh=f3035c45bc50bb5cac87ca01e7ef6a12485184f8

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201206-12.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/06/13/11

Source: secalert@redhat.com

http://www.pre-cert.de/advisories/PRE-SA-2011-05.txt

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48411

Source: secalert@redhat.com

http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=blob%3Bf=CHANGES%3Bh=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1%3Bhb=badf05140d3c2408715a73a52c0f35887e337c04