Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202311-02
HistoryNov 01, 2023 - 12:00 a.m.

Netatalk: Multiple Vulnerabilities including root remote code execution

2023-11-0100:00:00
Gentoo Foundation
security.gentoo.org
14
netatalk
kernel level
appletalk protocol suite
unix hosts
file servers
print servers
time servers
vulnerabilities
cve identifiers
root remote code execution
upgrade
emerge
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.048 Low

EPSS

Percentile

92.7%

JSON

Background

Netatalk is a kernel level implementation of the AppleTalk Protocol Suite, which allows Unix hosts to act as file, print, and time servers for Apple computers. It includes several script utilities, including etc2ps.sh.

Description

Multiple vulnerabilities have been discovered in Netatalk. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Netatalk users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-fs/netatalk-3.1.18"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-fs/netatalk< 3.1.18UNKNOWN

Related

openvas 35
nessus 17
mageia 2
thn 1
ubuntu 1
cert 1
debian 5
osv 13
malwarebytes 1
slackware 4
veracode 9
prion 9
zdi 10
cve 9
debiancve 9
ubuntucve 9
githubexploit 3
alpinelinux 9
redhatcve 1
fedora 6
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0027)
2023-03-28 00:00:00
QNAP QTS Multiple Vulnerabilities (QSA-22-12)
2022-05-03 00:00:00
QNAP QuTS hero Multiple Vulnerabilities (QSA-22-12)
2022-05-30 00:00:00
nessus
nessus
GLSA-202311-02 : Netatalk: Multiple Vulnerabilities including root remote code execution
2023-11-01 00:00:00
Debian DLA-3426-1 : netatalk - LTS security update
2023-05-17 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : Netatalk vulnerabilities (USN-6146-1)
2023-06-08 00:00:00
mageia
mageia
Updated netatalk packages fix security vulnerability
2023-02-07 03:06:39
Updated netatalk packages fix security vulnerability
2022-05-22 14:26:36
thn
thn
QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available
2022-04-28 04:26:00
ubuntu
ubuntu
Netatalk vulnerabilities
2023-06-08 00:00:00
cert
cert
Netatalk contains multiple error and memory management vulnerabilities
2022-11-16 00:00:00
debian
debian
[SECURITY] [DLA 3426-1] netatalk security update
2023-05-16 22:24:58
[SECURITY] [DSA 5503-1] netatalk security update
2023-09-20 17:47:57
[SECURITY] [DLA 3426-2] netatalk regression update
2023-06-01 17:49:40
osv
osv
netatalk vulnerabilities
2023-06-08 09:57:44
netatalk - security update
2023-05-17 00:00:00
netatalk - security update
2023-09-20 00:00:00
malwarebytes
malwarebytes
QNAP customers urged to disable AFP to protect against severe vulnerabilities
2022-04-28 14:28:10
slackware
slackware
[slackware-security] netatalk
2023-09-14 02:16:05
[slackware-security] netatalk
2023-01-13 20:39:17
[slackware-security] netatalk
2023-10-06 21:31:31
veracode
veracode
Remote Code Execution (RCE)
2022-03-31 11:39:35
Denial Of Services (DoS)
2023-05-08 15:39:03
Buffer Overflow
2022-03-30 23:20:27
prion
prion
Stack overflow
2023-03-28 19:15:00
Heap overflow
2021-05-21 15:15:00
Heap overflow
2022-11-12 05:15:00
zdi
zdi
Synology DiskStation Manager Netatalk dsi_doff Heap-based Buffer Overflow Remote Code Execution Vulnerability
2021-04-29 00:00:00
(Pwn2Own) Netatalk copyapplfile Stack-based Buffer Overflow Remote Code Execution Vulnerability
2022-03-23 00:00:00
(Pwn2Own) Netatalk parse_entries Improper Handling of Exceptional Conditions Remote Code Execution Vulnerability
2022-03-23 00:00:00
cve
cve
CVE-2021-31439
2021-05-21 15:15:00
CVE-2022-23122
2023-03-28 19:15:10
CVE-2022-23124
2023-03-28 19:15:10
debiancve
debiancve
CVE-2022-23125
2023-03-28 19:15:10
CVE-2022-45188
2022-11-12 05:15:00
CVE-2022-23121
2023-03-28 19:15:10
ubuntucve
ubuntucve
CVE-2022-23124
2022-03-21 00:00:00
CVE-2022-23123
2022-03-21 00:00:00
CVE-2022-23121
2022-03-21 00:00:00
githubexploit
githubexploit
Exploit for CVE-2022-23121
2022-05-28 05:48:35
Exploit for CVE-2022-23121
2022-05-12 20:58:01
Exploit for CVE-2022-23121
2022-05-12 20:58:01
alpinelinux
alpinelinux
CVE-2021-31439
2021-05-21 15:15:00
CVE-2022-23125
2023-03-28 19:15:10
CVE-2022-23121
2023-03-28 19:15:10
redhatcve
redhatcve
CVE-2022-22995
2022-05-20 22:46:15
fedora
fedora
[SECURITY] Fedora 39 Update: netatalk-3.1.18-1.fc39
2023-11-03 18:54:02
[SECURITY] Fedora 37 Update: netatalk-3.1.18-1.fc37
2023-10-14 01:27:07
[SECURITY] Fedora 38 Update: netatalk-3.1.18-1.fc38
2023-10-14 01:32:12

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.048 Low

EPSS

Percentile

92.7%

JSON
Related for GLSA-202311-02
openvas35nessus17mageia2thn1ubuntu1cert1debian5osv13malwarebytes1slackware4veracode9prion9zdi10cve9debiancve9ubuntucve9githubexploit3alpinelinux9redhatcve1fedora6