CVE-2018-10388

CRITICAL

TFTP Server <1.66 - RCE

Title source: llm

Description

Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.

Exploits (1)

nomisec WORKING POC 3 stars

by 0xddaa · poc

https://github.com/0xddaa/CVE-2018-10388

View Code ZIP pw:eip

References (1)

[Patch, Third Party Advisory] https://sourceforge.net/p/tftp-server/discussion/550564/thread/a586ce62/

Scores

CVSS v3 9.8

EPSS 0.1815

EPSS Percentile 95.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-134

Status published

Products (1)

open_tftp_server_project/open_tftp_server < 1.66

Published Dec 23, 2019

Tracked Since Feb 18, 2026