CVE-2022-45188

2022-11-1205:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

48.7%

JSON

Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).

OSVersionArchitecturePackageVersionFilename
Debian11allnetatalk< 3.1.12~ds-8+deb11u1netatalk_3.1.12~ds-8+deb11u1_all.deb
Debian10allnetatalk< 3.1.12~ds-3+deb10u1netatalk_3.1.12~ds-3+deb10u1_all.deb
Debian999allnetatalk< 3.1.15~ds-1netatalk_3.1.15~ds-1_all.deb
Debian13allnetatalk< 3.1.15~ds-1netatalk_3.1.15~ds-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	netatalk	< 3.1.12~ds-8+deb11u1	netatalk_3.1.12~ds-8+deb11u1_all.deb
Debian	10	all	netatalk	< 3.1.12~ds-3+deb10u1	netatalk_3.1.12~ds-3+deb10u1_all.deb
Debian	999	all	netatalk	< 3.1.15~ds-1	netatalk_3.1.15~ds-1_all.deb
Debian	13	all	netatalk	< 3.1.15~ds-1	netatalk_3.1.15~ds-1_all.deb