CVE-2011-2199

CVE-2011-2199 describes a buffer overflow vulnerability in tftp-hpa versions prior to 5.1, specifically affecting the h_peter_anvin tftp_hpa product. This flaw allows remote, unauthenticated attackers to trigger a denial of service and potentially execute arbitrary code by manipulating the utimeout option. With a CVSS score of 7.5, it represents a high severity risk due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it has not garnered significant attention.