CVE-2024-38441

2024-06-1613:15:53

[email protected]

web.nvd.nist.gov

netatalk buffer overflow

fpmapname error

heap-based overflow

cve-2024-38441

afp_mapname

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to ‘\0’ in FPMapName in afp_mapname in etc/afpd/directory.c.

References

github.com/Netatalk/netatalk/blob/90d91a9ac9a7d6132ab7620d31c8c23400949206/etc/afpd/directory.c#L2333

github.com/Netatalk/netatalk/issues/1098