CVE-2022-23124

🗓️ 28 Mar 2023 19:10:15Reported by GoogleType

osv🔗 osv.dev👁 17 Views

Netatalk vulnerability allows remote attackers to disclose sensitive info. No authentication needed. Flaw in get_finderinfo method permits unauthorized data access leading to buffer overflow. Enables arbitrary code execution as root. ZDI-CAN-15870

Reporter	Title	Published	Views	Family All 36
UbuntuCve	CVE-2022-23124	21 Mar 202200:00	–	ubuntucve
Zero Day Initiative	(Pwn2Own) Netatalk get_finderinfo Out-Of-Bounds Read Information Disclosure Vulnerability	23 Mar 202200:00	–	zdi
CVE	CVE-2022-23124	28 Mar 202319:15	–	cve
Cvelist	CVE-2022-23124	28 Mar 202300:00	–	cvelist
Debian CVE	CVE-2022-23124	28 Mar 202319:15	–	debiancve
Prion	Design/Logic Flaw	28 Mar 202319:15	–	prion
Veracode	Out-Of-Bounds Reads	30 Mar 202223:20	–	veracode
NVD	CVE-2022-23124	28 Mar 202319:15	–	nvd
AlpineLinux	CVE-2022-23124	28 Mar 202319:15	–	alpinelinux
OpenVAS	Synology DiskStation Manager (DSM) 6.2.x < 6.2.4-25556-6, 7.0.x < 7.0.1-42218-4, 7.1.x < 7.1-42661-1 Multiple Vulnerabilities (Synology-SA-22:06) - Unreliable Remote Version Check	16 Nov 202200:00	–	openvas

Source	Link
security	www.security.gentoo.org/glsa/202311-02
debian	www.debian.org/security/2023/dsa-5503
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-525/
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00018.html
netatalk	www.netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2023 19:15Current

9.4High risk

Vulners AI Score9.4

CVSS39.8

EPSS0.049