OESA-2026-4660

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4660

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4660.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4660

Upstream

CVE-2026-85234

Published

2026-11-04T13:54:11Z

Modified

2026-11-04T14:00:04Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

tftp security update

Details

TFTP which is the abbreviation of Trivial File Fransfer Protocol enables users to transfer files between local host and remote machine. This package tftp is a client implementing TFTP.

Security Fix(es):

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring() function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.(CVE-2026-85234)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:24.03-LTS-SP3 / tftp

Package

Name: tftp
Purl: pkg:rpm/openEuler/tftp&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2-33.oe2403sp3

Ecosystem specific

{
    "aarch64": [
        "tftp-5.2-33.oe2403sp3.aarch64.rpm",
        "tftp-debuginfo-5.2-33.oe2403sp3.aarch64.rpm",
        "tftp-debugsource-5.2-33.oe2403sp3.aarch64.rpm",
        "tftp-server-5.2-33.oe2403sp3.aarch64.rpm"
    ],
    "noarch": [
        "tftp-help-5.2-33.oe2403sp3.noarch.rpm"
    ],
    "src": [
        "tftp-5.2-33.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "tftp-5.2-33.oe2403sp3.x86_64.rpm",
        "tftp-debuginfo-5.2-33.oe2403sp3.x86_64.rpm",
        "tftp-debugsource-5.2-33.oe2403sp3.x86_64.rpm",
        "tftp-server-5.2-33.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4660.json"