Critical severity9.8NVD Advisory· Published Dec 23, 2019· Updated Jun 17, 2026
CVE-2018-10388
CVE-2018-10388
Description
Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:open_tftp_server_project:open_tftp_server:*:*:*:*:sp:*:*:*Range: <=1.66
- TFTP Server/TFTP Server SPdescription
- Range: <=1.66
Patches
Vulnerability mechanics
References
1- sourceforge.net/p/tftp-server/discussion/550564/thread/a586ce62/nvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.