DEBIAN-CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

DEBIAN-CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

SUSE CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2023:0316-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0316-1 advisory. - CVE-2022-43634: Fixed heap-based Buffer Overflow in dsiwriteinit bsc1207974. Tenable has extracted the preceding...

The vulnerability of the dsi_writeinit function in the implementation of the Apple Filing Protocol Netatalk allows a hacker to execute arbitrary code in the context of the root user.

The vulnerability of the dsiwriteinit function in the Apple Filing Protocol Netatalk implementation is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user remotely...

PT-2023-1329 · Netatalk +4 · Netatalk +4

Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within th...

SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2022:1184-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1184-1 advisory. - CVE-2022-23125: Fixed remote arbitrary code execution related to copyapplfile. - CVE-2022-23121: Fixed remot...

Netatalk 安全漏洞

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. Netatalk suffers from a security vulnerability that stems from a lack of proper error handling when parsing AppleDouble entries. An attacker could exploit the vulnerability t...

UBUNTU-CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

UBUNTU-CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

UBUNTU-CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

UBUNTU-CVE-2022-23123

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of...

PT-2022-15867 · Netatalk +3 · Netatalk +3

Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists...

PT-2022-13028 · Netatalk +3 · Netatalk +3

Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within th...

PT-2021-19319 · Synology +4 · Synology Diskstation Manager +4

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists...

Netatalk Out-of-Bounds Write Vulnerability

Netatalk is a server for providing Appletalk network protocol services on the Linux platform. An out-of-bounds write vulnerability exists in the dsiopensess.c file in versions prior to Netatalk 3.1.12, which stems from the program's failure to perform a boundary check on attacker-controlled data...

UBUNTU-CVE-2018-1160

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsiopensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution...

PT-2018-2633

Name of the Vulnerable Software and Affected Versions Netatalk versions prior to 3.1.12 Description The issue is related to a lack of bounds checking on attacker-controlled data in the dsi opensess.c file, which can lead to an out of bounds write. This allows a remote unauthenticated attacker to...

DTSA-183-1 netatalk - remote code execution

Bulletin has no description...

CVE-2008-5718

The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...