https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:08:44 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:78952 <p><strong>Affected:</strong> AlmaLinux:8: tftp, AlmaLinux:8: tftp-server</p> <p>The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.</p> <p>Security Fix(es):</p> <p>* tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: tftp, AlmaLinux:8: tftp-server</p> <p>The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.</p> <p>Security Fix(es):</p> <p>* tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:78952 https://cve.radiocsirt.org/vuln/euvd-2026-368956 EUVD-2026-368956 https://cve.radiocsirt.org/vuln/euvd-2026-368956 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85234 <p>A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.</p> <p>A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-85234 https://cve.radiocsirt.org/vuln/ghsa-rxqq-3mgh-v3m7 <p>A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.</p> <p>A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-rxqq-3mgh-v3m7 https://cve.radiocsirt.org/vuln/rhsa-2026:78952 <p>tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine</p> <p>tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine</p> https://cve.radiocsirt.org/vuln/rhsa-2026:78952 https://cve.radiocsirt.org/vuln/rlsa-2026:78952 <p><strong>Affected:</strong> Rocky Linux:8: tftp</p> <p>The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.</p> <p>Security Fix(es):</p> <p>* tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: tftp</p> <p>The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.</p> <p>Security Fix(es):</p> <p>* tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:78952 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-85234 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tftp-hpa, Ubuntu:16.04:LTS: tftp-hpa, Ubuntu:18.04:LTS: tftp-hpa, Ubuntu:20.04:LTS: tftp-hpa, Ubuntu:22.04:LTS: tftp-hpa, Ubuntu:24.04:LTS: tftp-hpa, Ubuntu:26.04:LTS: tftp-hpa</p> <p>A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tftp-hpa, Ubuntu:16.04:LTS: tftp-hpa, Ubuntu:18.04:LTS: tftp-hpa, Ubuntu:20.04:LTS: tftp-hpa, Ubuntu:22.04:LTS: tftp-hpa, Ubuntu:24.04:LTS: tftp-hpa, Ubuntu:26.04:LTS: tftp-hpa</p> <p>A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-85234