868 matches found
Fedora 37 : netatalk (2023-ef901c862c)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ef901c862c advisory. 3.1.18 release Security fix for CVE-2022-22995 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Arbitrary Code Execution
netatalk is vulnerable to Arbitrary Code Execution. The vulnerability arises from the combination of primitives offered by SMB and AFP in their default configuration, enabling an attacker to inject and execute malicious code, resulting in arbitrary file write...
Slackware: Security Advisory (SSA:2023-279-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] netatalk
New netatalk packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/netatalk-3.1.18-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: Harden createappledesktopfolder. For mo...
Slackware Linux 15.0 / current netatalk Vulnerability (SSA:2023-279-01)
The version of netatalk installed on the remote host is prior to 3.1.18. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-279-01 advisory. - The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By...
Remote Code Execution (RCE)
netatalk is vulnerable to Remote Code Execution RCE. The vulnerability exists due to the lack of type checking in callers in the dallocvalueforkey function of the library, which leads to type confusion and allows an attacker to inject and execute malicious code by parsing maliciously crafted...
Debian: Security Advisory (DLA-3584-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3584 : netatalk - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3584 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3584-1 [email protected] https://www.debian.org/lts/security/...
SUSE CVE-2023-42464
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in...
SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2023:3779-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3779-1 advisory. - CVE-2023-42464: Fixed afpd daemon vulnerable to type confusion bsc1214744. Tenable has extracted the preceding...
SUSE-SU-2023:3779-1 Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2023-42464: Fixed afpd daemon vulnerable to type confusion bsc1214744...
[SECURITY] [DLA 3584-1] netatalk security update
Debian LTS Advisory DLA-3584-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 25, 2023 https://wiki.debian.org/LTS Package : netatalk Version : 3.1.12ds-3+deb10u4 CVE ID : CVE-2023-42464 Debian Bug : 1052087 Florent Saudel and Arnaud Gatignol discovered...
DLA-3584-1 netatalk - security update
Bulletin has no description...
Netatalk 3.1.x < 3.1.17 RCE Vulnerability
Netatalk is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netatalk:netatalk...
Debian: Security Advisory (DSA-5503-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-5503-1 : netatalk - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5503 advisory. Multiple security issues were discovered in Netatalk, an implementation of the Apple Filing Protocol AFP for offering file service mainly to macOS clients, which...
[SECURITY] [DSA 5503-1] netatalk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5503-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2023 https://www.debian.org/security/faq -...
DEBIAN-CVE-2023-42464
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in...
CVE-2023-42464
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in...
CVE-2023-42464
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in...