Moderate Vulnerability in TFTP Package: Denial of Service Risk
Summary
RLSA-2026:80663: Moderate: tftp security update. Affects tftp versions < 0:5.2-40.el9_8.1. Fixed in 0:5.2-40.el9_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Trivial File Transfer Protocol (TFTP) is a simple protocol used primarily for transferring files, often in environments where minimal overhead is required, such as booting diskless workstations. The TFTP package includes two main components: the 'tftp' client, which provides the user interface, and the 'tftp-server', which facilitates file transfers from a server to a client. This protocol is essential for certain network operations but can be vulnerable to security issues, particularly when not properly managed.
Vulnerability Detail
The vulnerability identified as CVE-2026-85234 is a Denial of Service (DoS) issue stemming from an out-of-bounds read/write in the remap engine of the tftp-hpa implementation. This flaw allows an attacker to exploit the TFTP service, potentially leading to service interruptions and making the system unresponsive. The impact of this vulnerability is significant, as it can disrupt file transfer operations and affect the overall functionality of systems relying on TFTP.
How To Fix
Minimum fixed version
0:5.2-40.el9_8.1
This is the first release that contains the fix.
sudo dnf update tftpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the TFTP service until the package is updated. This can be done by running the command:
sudo systemctl stop tftp.service' and 'sudo systemctl disable tftp.service
However, this will prevent any file transfers using TFTP until the service is re-enabled.
Conclusion
The identified vulnerability in the TFTP package poses a significant risk of Denial of Service due to an out-of-bounds read/write issue. Users are urged to update their TFTP packages to the latest version to mitigate this risk. Temporary workarounds are available, but the best course of action is to apply the security patch as soon as possible.
See every vulnerability recorded for tftp →
FAQ
The CVSS score for this vulnerability is 7.5, indicating a moderate severity level.
The vulnerability affects the TFTP package in Rocky Linux 9 and potentially other distributions that utilize the same package.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If an immediate update is not possible, consider disabling the TFTP service as a temporary workaround to mitigate the risk.
The Rocky Enterprise Software Foundation and Red Hat are responsible for providing updates and security fixes for the TFTP package.
Related vulnerabilities
Recent vulnerabilities recorded for tftp.
