Vulnerabilities > CVE-2020-6097 - Reachable Assertion vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
atftp-project
debian
opensuse
CWE-617
NVD
Published: 2020-09-10
Updated: 2024-11-21

Summary

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Atftp_Project
1
OS
Debian
1
OS
Opensuse
1

Common Weakness Enumeration (CWE)

References