Synology DiskStation Manager Out-of-bounds Write (CVE-2021-31439)

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...

Synology DiskStation Manager Netatalk Out-of-bounds Write (CVE-2018-1160)

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsiopensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution. This plugin only works with Tenable.ot. Pleas...

Slackware: Security Advisory (SSA:2024-253-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-900475e0f7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] netatalk

New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.2.8-i586-1slack15.0.txz: Upgraded. Bump bundled WolfSSL library to stable version 5.7.2, GitHub 1433. For more informatio...

Slackware Linux 15.0 / current netatalk Multiple Vulnerabilities (SSA:2024-253-01)

The version of netatalk installed on the remote host is prior to 3.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-253-01 advisory. New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

netatalk3 -- multiple WolfSSL vulnerabilities

Netatalk release reports: WolfSSL 5.7.0 included in netatalk includes multiple security vulnerabilities...

Mageia: Security Advisory (MGASA-2024-0259)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated netatalk packages fix security vulnerabilities

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in etc/uams/uamspam.c. CVE-2024-38439 Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation...

MGASA-2024-0259 Updated netatalk packages fix security vulnerabilities

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in etc/uams/uamspam.c. CVE-2024-38439 Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation...

[SECURITY] Fedora 40 Update: netatalk-3.2.1-1.fc40

Netatalk is a freely-available Open Source AFP file server. A NIX/BSD system running Netatalk is capable of serving many Macintosh clients simultaneously as an AppleShare file server AFP...

Fedora 40 : netatalk (2024-900475e0f7)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-900475e0f7 advisory. Security fix for CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441 Tenable has extracted the preceding description block directly from the Fedora...

SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2024:2301-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2301-1 advisory. - CVE-2024-38439: Fixed a heap buffer overflow because of setting ibufPASSWDLEN to \0 in FPLoginExt in login i...

SUSE-SU-2024:2301-1 Security update for netatalk

This update for netatalk fixes the following issues: - CVE-2024-38439: Fixed a heap buffer overflow because of setting ibufPASSWDLEN to \0 in FPLoginExt in login in etc/uams/uamspam.c bsc1226430. - CVE-2024-38440: Fixed a heap buffer overflow because of incorrectly using FPLoginExt in BNbin2bn in...

Slackware: Security Advisory (SSA:2024-185-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] netatalk

New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.2.1-i586-1slack15.0.txz: Upgraded. Shared library .so-version bump. Fixed security issues that could lead to a denial of...

Netatalk < 3.2.1 Multiple Vulnerabilities

Netatalk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netatalk:netatalk"; ifdescription...

Slackware Linux 15.0 / current netatalk Multiple Vulnerabilities (SSA:2024-185-01)

The version of netatalk installed on the remote host is prior to 3.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-185-01 advisory. New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

The vulnerability of the BNbin2bn function (etc/uams/uams_dhx_pam.c) in the implementation of the Apple File Protocol Netatalk allows a hacker to cause a service failure.

The vulnerability of the BNbin2bn function etc/uams/uamsdhxpam.c in the implementation of the Apple File Protocol Netatalk protocol is related to buffer overflow in the “bucket” component. Exploiting this vulnerability can allow an attacker to trigger a service failure through the FPLoginExt...

SUSE CVE-2024-38439

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in etc/uams/uamspam.c. 2.4.1 and 3.1.19 are also fixed versions...