Lucene search
K

7 matches found

Prion
Prion
added 2023/03/28 7:15 p.m.26 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

7.5CVSS9.6AI score0.09113EPSS
Exploits0References5Affected Software2
CVE
CVE
added 2023/03/28 12:0 a.m.590 views

CVE-2022-0194

Netatalk (vulnerable component: ad_addcomment) is affected by CVE-2022-0194. The flaw stems from improper validation of user-supplied data length before copying into a fixed-size stack buffer, enabling an unauthenticated attacker to execute arbitrary code with root privileges on affected installa...

9.8CVSS9.5AI score0.09113EPSS
Exploits0References6Affected Software1
AlpineLinux
AlpineLinux
added 2023/03/28 12:0 a.m.36 views

CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

9.8CVSS9.7AI score0.09113EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:35 a.m.1 views

SUSE CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

9.8CVSS9.6AI score0.09113EPSS
Exploits0References3
Veracode
Veracode
added 2022/03/31 9:56 p.m.19 views

Remote Code Execution (RCE)

netatalk is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization via the adaddcomment function which allows remote attackers to execute arbitrary code...

9.8CVSS7.9AI score0.09113EPSS
Exploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/03/23 12:0 a.m.86 views

(Pwn2Own) Netatalk ad_addcomment Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

9.8CVSS3.8AI score0.09113EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/03/21 8:36 a.m.22 views

CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

9.8CVSS7.8AI score0.09113EPSS
Exploits0References5
Rows per page
Query Builder