CyberRota Analysis
AI-GeneratedThe vulnerability affects the tftp-hpa versions prior to 6.0, specifically in the `rewrite_string()` function, which allows unauthenticated remote attackers to exploit an out-of-bounds read condition. This can lead to crashes of the in.tftpd request handler when specific read or write requests are made, potentially disrupting service. Organizations using affected versions of tftp-hpa should prioritize patching to mitigate the risk of service interruptions.
Original NVD Description
tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request handler.