CVE Feed

    Dashboard / CVE / CVE-2011-2199

    CVE-2011-2199

    Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.

    Published:Jun 10, 2011
    Last Modified:Apr 11, 2025
    EPS:Jul 22, 2012
    EPSS Score:0.02716
    CVSS Score:7.5

    Affected Products

    Vendor
    H Peter Anvin
    Product
    Tftp-hpa

    Exploits

    No exploit reference

    References

    http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=blob%3Bf=CHANGES%3Bh=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1%3Bhb=badf05140d3c2408715a73a52c0f35887e337c04
    http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=commitdiff%3Bh=f3035c45bc50bb5cac87ca01e7ef6a12485184f8
    http://security.gentoo.org/glsa/glsa-201206-12.xml
    http://www.openwall.com/lists/oss-security/2011/06/13/11
    http://www.pre-cert.de/advisories/PRE-SA-2011-05.txt
    http://www.securityfocus.com/bid/48411
    http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=blob%3Bf=CHANGES%3Bh=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1%3Bhb=badf05140d3c2408715a73a52c0f35887e337c04
    http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=commitdiff%3Bh=f3035c45bc50bb5cac87ca01e7ef6a12485184f8
    http://security.gentoo.org/glsa/glsa-201206-12.xml
    http://www.openwall.com/lists/oss-security/2011/06/13/11
    http://www.pre-cert.de/advisories/PRE-SA-2011-05.txt
    http://www.securityfocus.com/bid/48411

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High