critical9.8
CVE-2018-10388
Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitr…
Impact
Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Tftp Server Project | Open Tftp Server | through 1.66 |