Lucene search

CVE-2022-0194

🗓️ 28 Mar 2023 19:09:15Reported by zdiType

Netatalk ad_addcomment function allows remote code execution without authentication

Reporter	Title	Published	Views	Family All 37
NVD	CVE-2022-0194	28 Mar 202319:15	–	nvd
UbuntuCve	CVE-2022-0194	21 Mar 202200:00	–	ubuntucve
Debian CVE	CVE-2022-0194	28 Mar 202319:15	–	debiancve
Cvelist	CVE-2022-0194	28 Mar 202300:00	–	cvelist
Zero Day Initiative	(Pwn2Own) Netatalk ad_addcomment Stack-based Buffer Overflow Remote Code Execution Vulnerability	23 Mar 202200:00	–	zdi
Veracode	Remote Code Execution (RCE)	31 Mar 202221:56	–	veracode
AlpineLinux	CVE-2022-0194	28 Mar 202319:15	–	alpinelinux
Prion	Stack overflow	28 Mar 202319:15	–	prion
OSV	CVE-2022-0194	28 Mar 202319:15	–	osv
OSV	netatalk - security update	17 May 202300:00	–	osv

Nvd

Vulners

Node

netatalk netatalkRange<3.1.13

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "vendor": "Netatalk",
    "product": "Netatalk",
    "versions": [
      {
        "version": "3.1.12",
        "status": "affected"
      }
    ]
  }
]

Source	Link
netatalk	www.netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
debian	www.debian.org/security/2023/dsa-5503
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00018.html
security	www.security.gentoo.org/glsa/202311-02
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-530/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2023 19:15Current

9.5High risk

Vulners AI Score9.5

CVSS39.8

EPSS0.414