Threats tagged 'ghsa-fp59-6rfj-9jgw'

A vulnerability in dnsmasq's TFTP server allows serving incorrect file contents due to a stale transfer cache not being invalidated after a transfer completes. This can cause a client to receive previously cached data instead of the requested file. In PXE network-boot environments, this flaw can enable an attacker on the local network to substitute attacker-chosen boot content for a victim machine. The attack complexity is high and the attack vector is limited to adjacent networks. Mitigations include disabling TFTP if not needed, restricting TFTP interfaces, or compiling dnsmasq without TFTP support.