CVE:CVE-2021-41054
CNNVD:CNNVD-202109-781
atftp是一款TFTP协议的客户端实现。
ATFTP 0.7.4及之前版本的tftpd_file.c存在安全漏洞，该漏洞源于缓冲区大小处理没有正确地考虑数据、OACK和其他选项的组合。
solution:Upgrade atftp_project atftp to a higher version than 0.7.4,and avoid the version (,0.7.4]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0