Skip to content
OpenAdvisories
Unscored USN-4643-1 2 CVEs

atftp vulnerabilities

Published Nov 24, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that atftp's FTP server did not properly handler certain
input. An attacker could use this to to cause a denial of service (crash)
or possibly execute arbitrary code. (CVE-2019-11365)

It was discovered that atftp's FTP server did not make proper use of
mutexes when locking certain data structures. An attacker could use this to
cause a denial of service via a NULL pointer dereference. (CVE-2019-11366)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS atftp 0.7.git20120829-3.1~0.16.04.1

Vulnerabilities 2

  • Unscored —
    CVE-2019-11365

    An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based …

    atftp atftp Debian Ubuntu
  • Unscored —
    CVE-2019-11366

    An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the cur…

    atftp atftp Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-11365
  • report
    https://ubuntu.com/security/CVE-2019-11366