CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

CVE-2022-23125

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate...

CVE-2022-23123

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of...

CVE-2022-24353

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue...

CVE-2022-1230

Samsung Galaxy S21 devices with software versions prior to 4.5.40.5 are affected by a local-privilege escalation vulnerability in the handling of redirections (loadUrl). An attacker who can execute low-privileged code on the target can force a redirect to a malicious site, and, in combination wit...

CVE-2022-24353

TP-Link AC1750 router (v1.1.4 Build 20211022 rel.59103(5553)) is affected by a NetUSB.ko buffer over-read that allows network-adjacent attackers to execute code with root privileges. This is due to insufficient validation of user-supplied data. Affected component: NetUSB.ko; impact includes remot...

CVE-2022-23124

Netatalk is affected by CVE-2022-23124 (out-of-bounds read) and related CVEs, enabling unauthenticated information disclosure and potential code execution in some contexts. Public advisories reference multiple Netatalk CVEs (including CVE-2022-23124 and others) with impact descriptions such as in...

CVE-2022-23123

Netatalk vulnerability CVE-2022-23123 (and related CVEs) affects AFP service where getdirparams improperly validates user data, causing an out-of-bounds read that can enable remote code execution as root. No authentication is required. Public advisories identify the issue and link it to ZDI-15830...

CVE-2022-23122

CVE-2022-23122 affects Netatalk, with the flaw in setfilparams allowing an unauthenticated attacker to trigger a stack-based buffer overflow and execute code as root. This is a remote code execution with high impact on confidentiality, integrity, and availability. The issue stems from insufficien...

CVE-2022-24673

Canon imageCLASS MF644Cdw 10.02 printers are affected by CVE-2022-24673 due to a stack-based buffer overflow in the SLP protocol implementation, allowing remote, unauthenticated code execution as root. The issue stems from inadequate validation of user-supplied data length before copying into a f...

CVE-2022-24973

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

CVE-2023-26356 ZDI-CAN-19506: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

CVE-2022-23125

Netatalk CVE-2022-23125 is a remote, unauthenticated code execution flaw in the copyapplfile function where len validation for user data can overflow a fixed-size stack buffer. Affected product: Netatalk (AFP) 3.1.x. Root context: multiple sources confirm root-level impact and disclosure of this ...

CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

CVE-2022-24352

The CVE-2022-24352 issue affects TP-Link AC1750 routers (versions prior to 211210). It is tied to the NetUSB.ko kernel module and stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. Exploitation is possible by network-adjacent attackers wi...