Linux Distros Unpatched Vulnerability : CVE-2026-44072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk 2.2.1 through 4.4.2 calls system after a failed chdir without properly handling the error condition, which allows a local privileged user to execute...

EUVD-2008-5689

Malware in sbrugna...

EUVD-2022-28214

Malicious code in bioql PyPI...

EUVD-2022-15398

Malicious code in bioql PyPI...

EUVD-2022-28213

Malicious code in bioql PyPI...

EUVD-2022-46630

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-23124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit th...

Linux Distros Unpatched Vulnerability : CVE-2023-42464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded...

Linux Distros Unpatched Vulnerability : CVE-2022-23122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this...

Linux Distros Unpatched Vulnerability : CVE-2024-38439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in...

Linux Distros Unpatched Vulnerability : CVE-2024-38440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in...

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

SUSE CVE-2024-38440

Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BNbin2bn in etc/uams/uamsdhxpam.c. The original issue 1097 report stated: 'The latest version of Netatalk v3.2.0 contains a security...

DEBIAN-CVE-2024-38439

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in etc/uams/uamspam.c. 2.4.1 and 3.1.19 are also fixed versions...

Netatalk Security Vulnerabilities

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. A security vulnerability exists in Netatalk version 3.2.0, which stems from the incorrect use of FPLoginExt in BNbin2bn in etc/uams/uamsdhxpam.c, which results in a heap-base...

Netatalk Security Vulnerabilities

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. A security vulnerability exists in Netatalk version 3.2.0, which stems from etc/uams/uamspam.c setting ibufPASSWDLEN to 0 in FPLoginExt...

USN-6786-1 netatalk vulnerabilities

It was discovered that Netatalk did not properly protect an SMB and AFP default configuration. A remote attacker could possibly use this issue to execute arbitrary code...

Slackware Linux 15.0 / current netatalk Vulnerability (SSA:2023-279-01)

The version of netatalk installed on the remote host is prior to 3.1.18. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-279-01 advisory. - The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By...

SUSE-SU-2023:3779-1 Security update for netatalk

This update for netatalk fixes the following issues: - CVE-2023-42464: Fixed afpd daemon vulnerable to type confusion bsc1214744...

CVE-2022-43634

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsiwriteinit function. The issue results from the lack of proper validation of the length o...