VDB
CVE-2011-2199
CVE-2011-2199
PUBLISHED
CVSS 7.5 HIGH
Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.
EPSS 5.25% · 92.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
5.25%
92.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| h_peter_anvin | tftp-hpa | 0, 0 |
| n/a | n/a | *, * |
Timeline
- Jul 22, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 17, 2022 CVE Updated
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- http://www.pre-cert.de/advisories/PRE-SA-2011-05.txt technical
- http://www.openwall.com/lists/oss-security/2011/06/13/11 technical
- https://nvd.nist.gov/vuln/detail/CVE-2011-2199 advisory
- http://git.kernel.org/?p=network/tftp/tftp-hpa.git;a=blob;f=CHANGES;h=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1;hb=badf05140d3c2408715a73a52c0f35887e337c04 url
- GLSA-201206-12 vendor-advisory
- 48411 vdb
- http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=blob%3Bf=CHANGES%3Bh=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1%3Bhb=badf05140d3c2408715a73a52c0f35887e337c04 technical
- http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=commitdiff%3Bh=f3035c45bc50bb5cac87ca01e7ef6a12485184f8 technical
- http://git.kernel.org/?p=network/tftp/tftp-hpa.git;a=commitdiff;h=f3035c45bc50bb5cac87ca01e7ef6a12485184f8 url