CVE-2013-0145

CVE-2013-0145 describes a buffer overflow vulnerability in the TFTPD service of Serva32 version 2.1.0. This flaw allows remote, unauthenticated attackers to trigger a denial of service by sending a crafted, long string in a read request, with the potential for arbitrary code execution. The vulnerability has a CVSS score of 5.0, indicating a medium severity due to its network-based attack vector and low attack complexity. While not listed in CISA's KEV catalog, a proof-of-concept exploit for denial of service is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.