CVE-2021-41054: Atftp Project Atftp

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.

Affected products

• Atftp Project Atftp: up to and including 0.7.4
• Debian Debian Linux: version 9.0 only

Published 2021-09-13. Last modified 2026-06-17.