An issue was discovered in HCC... CVE-2021-36762

7.8 AV AC AU C I A
发布: 2021-08-19
修订: 2024-11-21

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet buffer (if no '\0' byte exists within a reasonable range).

暂无可用Exp或PoC
当前有1条受影响产品信息