CVE-2025-1207

LOW

TFTPD64 4.64 - Denial of Service in DNS Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Permissions Required, VDB Entry vdb-entry
https://vuldb.com/?id.295144
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.295144
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.497249

Scores

CVSS v3 3.1
EPSS 0.0030
EPSS Percentile 21.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (1)
phjounin/TFTPD64 4.64
Published Feb 12, 2025
Tracked Since Feb 18, 2026