CVE-2019-12568 is a critical stack-based overflow vulnerability affecting Open TFTP Server SP 1.66 and earlier. A remote attacker can exploit this flaw by sending a specially crafted, long TFTP error packet to the server. This can lead to a denial of service or, more critically, arbitrary code execution, with a CVSS score of 9.8. While no public exploit code or active exploitation has been confirmed, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.66CPE matchmatch criteria | cpe:2.3:a:open_tftp_server_project:open_tftp_server:*:*:*:*:sp:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.