4.3

CVE-2005-4883

Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid "connect frames."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Philippe Jounin ≫ Tftpd32 Version <= 2.74
Philippe Jounin ≫ Tftpd32 Version 2.5
Philippe Jounin ≫ Tftpd32 Version 2.5 Update beta
Philippe Jounin ≫ Tftpd32 Version 2.51
Philippe Jounin ≫ Tftpd32 Version 2.52
Philippe Jounin ≫ Tftpd32 Version 2.53
Philippe Jounin ≫ Tftpd32 Version 2.54
Philippe Jounin ≫ Tftpd32 Version 2.60
Philippe Jounin ≫ Tftpd32 Version 2.62
Philippe Jounin ≫ Tftpd32 Version 2.70
Philippe Jounin ≫ Tftpd32 Version 2.72
Philippe Jounin ≫ Tftpd32 Version 2.73
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.75% 0.506
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html
Patch