Threats tagged 'ghsa-r558-xpjx-65pf'

A heap buffer overflow vulnerability exists in the BusyBox TFTP client when it requests a custom small block size and then falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP server can exploit this flaw by sending standard-sized packets, potentially leading to arbitrary code execution or denial of service by crashing the client application. The vulnerability requires an active connection to a malicious server using a non-default reduced block size. Red Hat rates this vulnerability as Important due to the potential for remote code execution without authentication.