(Pwn2Own) NETGEAR R6700v3 Vulnerable Third-Party Component Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Netatalk library that is installed on NETGEAR R6700v3 routers. The...

QNAP QTS Multiple Vulnerabilities (QSA-22-12)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

QNAP customers urged to disable AFP to protect against severe vulnerabilities

MacOS users that have a network-attached storage NAS device made by QNAP are being advised to disable the Apple Filing Protocol AFP on their devices until some severe vulnerabilities have been fixed. But QNAP is not the only vendor that needed to fix these vulnerabilities. Others have already don...

QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available

Network-attached storage NAS appliance maker QNAP on Wednesday said it's working on updating its QTS and QuTS operating systems after Netatalk last month released patches to contain seven security flaws in its software. Netatalk is an open-source implementation of the Apple Filing Protocol AFP,...

Vulnerabilities fixed in Netatalk

Vulnerabilities have been fixed in Netatalk. Netatalk is an open-source protocol that allows Unix systems to communicate with Apple systems. Netatalk uses the Apple Filing Protocol; the vulnerabilities found are in this protocol. The vulnerabilities allow an unauthenticated remote malicious perso...

Netatalk < 3.1.13 Multiple Vulnerabilities

Netatalk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netatalk:netatalk"; ifdescription...

Slackware: Security Advisory (SSA:2018-355-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2022:1184-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1184-1 advisory. - CVE-2022-23125: Fixed remote arbitrary code execution related to copyapplfile. - CVE-2022-23121: Fixed remot...

SUSE-SU-2022:1184-1 Security update for netatalk

This update for netatalk fixes the following issues: - CVE-2022-23125: Fixed remote arbitrary code execution related to copyapplfile. - CVE-2022-23121: Fixed remote arbitrary code execution related to parseentries. - CVE-2021-31439: Fixed remote arbitrary code execution related to dsistreamreceiv...

Remote Code Execution (RCE)

netatalk is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization via the adaddcomment function which allows remote attackers to execute arbitrary code...

Remote Code Execution (RCE)

netatalk is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of the length of user-supplied data prior to copying it to a heap-based buffer...

Out-of-Bounds Reads

netatalk out-of-bounds reads. This allows an attacker to disclose sensitive information or carry out an unauthenticated remote code execution on the device...

Remote Code Execution

netatalk is vulnerable to remote code execution. The vulnerability exists in Western Digital PR4100 NAS which allows an attacker to inject and execute codes...

Buffer Overflow

netatalk is vulnerable to buffer overflows. The vulnerability exists because the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer which allows remote attackers to execute arbitrary code...

Stack-based Buffer Overflow

netatalk is vulnerable to stack based buffer overflow. The vulnerability exists because the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer which allows an attacker to leverage this vulnerability to execute code in the...

Out-Of-Bounds Reads

netatalk is vulnerable to out of bound reads. The vulnerability exists due to lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer which allows an attacker to execute arbitrary code in the context of root...

Netatalk 安全漏洞

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. A security vulnerability exists in Netatalk that originates when parsing len elements, where the process does not properly validate the length of user-supplied data before...

Netatalk 缓冲区错误漏洞

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. Netatalk suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data. An attacker could exploit this vulnerability to execute...

(Pwn2Own) Netatalk getdirparams Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of...

(Pwn2Own) Netatalk get_finderinfo Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...