CVE-2024-38440

2024-06-1600:00:00

ubuntu.com

netatalk

off-by-one error

heap-based buffer overflow

bn_bin2bn

fploginext

unix

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer
overflow because of incorrectly using FPLoginExt in BN_bin2bn in
etc/uams/uams_dhx_pam.c.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchnetatalk< anyUNKNOWN
ubuntu20.04noarchnetatalk< anyUNKNOWN
ubuntu22.04noarchnetatalk< anyUNKNOWN
ubuntu23.10noarchnetatalk< anyUNKNOWN
ubuntu24.04noarchnetatalk< anyUNKNOWN
ubuntu14.04noarchnetatalk< anyUNKNOWN
ubuntu16.04noarchnetatalk< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	netatalk	< any	UNKNOWN
ubuntu	20.04	noarch	netatalk	< any	UNKNOWN
ubuntu	22.04	noarch	netatalk	< any	UNKNOWN
ubuntu	23.10	noarch	netatalk	< any	UNKNOWN
ubuntu	24.04	noarch	netatalk	< any	UNKNOWN
ubuntu	14.04	noarch	netatalk	< any	UNKNOWN
ubuntu	16.04	noarch	netatalk	< any	UNKNOWN