CVE-2021-36762

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3

published August 19, 2021

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet buffer (if no '\0' byte exists within a reasonable range).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02300 · 83.2th percentile
Published
2021-08-19T11:09Z
EPSS history
Timeline
  • 19 AUG 11:09Z
    An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3
    cvelistv5