CVE-2020-6097

Name of the Vulnerable Software and Affected Versions: atftp version 0.7.git20120829-3.1+b1

Description: The issue is related to a denial of service vulnerability in the atftpd daemon functionality. It can be exploited by a remote attacker using a specially crafted sequence of RRQ-Multicast requests, triggering an assert() call that results in a denial of service. An attacker can send malicious packets to trigger this issue.

Recommendations: For atftp version 0.7.git20120829-3.1+b1, consider restricting access to the atftpd daemon functionality to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the assert() function in the atftpd daemon until a fix is provided.