PatchTheCVE: atftphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-46671: options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/grhttps://patchthecve.com/cve/CVE-2021-46671.htmlhttps://patchthecve.com/cve/CVE-2021-46671.htmlWed, 17 Jun 2026 04:15:22 +0000MEDIUM 5.3: options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.CVE-2021-41054: tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consihttps://patchthecve.com/cve/CVE-2021-41054.htmlhttps://patchthecve.com/cve/CVE-2021-41054.htmlWed, 17 Jun 2026 04:07:48 +0000HIGH 7.5: tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.CVE-2020-6097: An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120https://patchthecve.com/cve/CVE-2020-6097.htmlhttps://patchthecve.com/cve/CVE-2020-6097.htmlWed, 17 Jun 2026 03:22:40 +0000HIGH 7.5: An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert() call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger th