Headline
Ubuntu Security Notice USN-6375-1
Ubuntu Security Notice 6375-1 - Florian Fainelli discovered that atftp did not properly manage requests made to a non-existent file, which could lead to a crash. A remote attacker could possibly use this issue to cause a denial of service.
==========================================================================Ubuntu Security Notice USN-6375-1September 15, 2023atftp vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 23.04- Ubuntu 22.04 LTSSummary:atftp could be made to crash if it received specially crafted networktraffic.Software Description:- atftp: Advanced TFTP Server and ClientDetails:Florian Fainelli discovered that atftp did not properly manage requestsmade to a non-existent file, which could lead to a crash. A remoteattacker could possibly use this issue to cause a denial of service.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 23.04: atftpd 0.8.0-3build0.23.04.1Ubuntu 22.04 LTS: atftpd 0.7.git20210915-4build1In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6375-1 https://launchpad.net/bugs/1989816Package Information: https://launchpad.net/ubuntu/+source/atftp/0.8.0-3build0.23.04.1https://launchpad.net/ubuntu/+source/atftp/0.7.git20210915-4build1