Skip to content

Serva 4.4.0 allows remote attackers to cause a denial of...

High severity Unreviewed Published Dec 1, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listedSuggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Serva 4.4.0 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcode 1, a related issue to CVE-2013-0145.

References

Published by the National Vulnerability Database Nov 29, 2021
Published to the GitHub Advisory Database Dec 1, 2021
Last updated Feb 1, 2023

Severity

High

EPSS score

0.587%
(78th percentile)

Weaknesses

CVE ID

CVE-2021-44429

GHSA ID

GHSA-vj55-m9gh-hjm2

Source code

No known source code

Dependabot alerts are not supported on this advisory because it does not have a package from a supported ecosystem with an affected and fixed version.

Learn more about GitHub language support

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.