The GNU tftp client in the inetutils-1.4.2 is susceptible to buffer overflow attacks. Due to untrusted data from DNS resolved hostname being copied into finite static buffers without any bounds checking, several buffers can be overflowed in the .bss. Arbitrary code execution is possible.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34850/gnutftp.txt
Source: https://packetstormsecurity.com/files/34850/gnutftp.txt.html