Serva 4.4.0 allows remote malicious users to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcode 1, a related issue to CVE-2013-0145.
vercot serva 4.4.0