Homepage
About Snyk

tftpy@0.6.0 vulnerabilities

Python TFTP library

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the tftpy package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Buffer Overflow

tftpy is a Python TFTP library

Affected versions of this package are vulnerable to Buffer Overflow due to the parse function in the TftpPacketFactory class, on the parse of a packet with a length less than 2. An attacker can cause a denial of service by sending specially crafted packets.

How to fix Buffer Overflow?

A fix was pushed into the master branch but not yet published.

[0,)
  • H
Directory Traversal

tftpy is a Python TFTP library

Affected versions of this package are vulnerable to Directory Traversal outside tftproot. It will not catch a case where the tftproot directory has a sibling file/directory that shares tftproot as its prefix.

How to fix Directory Traversal?

Upgrade tftpy to version 0.8.1 or higher.

[,0.8.1)
Go back to all versions of this package