CVE-2025-31237

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. Mounting a maliciously crafted AFP network share may lead to system termination...

CVE-2025-31240

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. Mounting a maliciously crafted AFP network share may lead to system termination...

CVE-2025-31240

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. Mounting a maliciously crafted AFP network share may lead to system termination...

CVE-2025-31240

CVE-2025-31240 affects macOS when mounting a maliciously crafted AFP share, which can terminate the system. Fixed in macOS Sequoia 15.5, Sonoma 14.7.6, and Ventura 13.7.6 via improved checks. CVSS 3.1: Network attack, high impact on availability; no confidentiality/integrity impact per the entry....

CVE-2025-31237

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. Mounting a maliciously crafted AFP network share may lead to system termination...

CVE-2025-31237

The CVE-2025-31237 issue affects macOS network file handling (AFP) and is addressed in macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. According to the provided sources, mounting a maliciously crafted AFP network share may lead to system termination, caused by an underlying iss...

CVE-2025-31237

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. Mounting a maliciously crafted AFP network share may lead to system termination...

CVE-2025-31246

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6. Connecting to a malicious AFP server may corrupt kernel memory...

PT-2025-20790 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue was addressed with improved memory handling. Connecting to a malicious AFP server may corrupt kernel memory. Recommendations: For macOS versions prior t...

PT-2025-20786 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue is related to mounting a maliciously crafted AFP network share, which may lead to system termination...

About the security content of macOS Sonoma 14.7.6

About the security content of macOS Sonoma 14.7.6 This document describes the security content of macOS Sonoma 14.7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

Qnap QTS Path Traversal (CVE-2015-6003)

Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X 1 user or 2 guest account. This plugin only works with Tenable.ot. Please...

AFP News Agency’s Content Delivery Systems Hit by Cyberattack

AFP news agency suffers a cyberattack disrupting its content delivery systems. News coverage continues as experts investigate, with…...

Apple Filing Protocol Info Enumerator

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apple Filing Protocol Info Enumerator', 'Description' = %q This module fetches AFP server information, including server name, network address,...

[SECURITY] Fedora 40 Update: netatalk-3.2.1-1.fc40

Netatalk is a freely-available Open Source AFP file server. A NIX/BSD system running Netatalk is capable of serving many Macintosh clients simultaneously as an AppleShare file server AFP...

DEBIAN-CVE-2024-38441

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuflen to '\0' in FPMapName in afpmapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions...

UBUNTU-CVE-2024-38441

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuflen to '\0' in FPMapName in afpmapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions...

Mageia: Security Advisory (MGASA-2024-0201)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated netatalk packages fix security vulnerability

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

USN-6786-1: Netatalk vulnerabilities

It was discovered that Netatalk did not properly protect an SMB and AFP default configuration. A remote attacker could possibly use this issue to execute arbitrary code...