9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.011 Low
EPSS
Percentile
84.8%
netatalk is vulnerable to Remote Code Execution (RCE). The vulnerability exists due to the lack of type checking in callers in the dalloc_value_for_key
function of the library, which leads to type confusion and allows an attacker to inject and execute malicious code by parsing maliciously crafted Spotlight RPC packets
github.com/Netatalk/netatalk/issues/486
lists.debian.org/debian-lts-announce/2023/09/msg00031.html
netatalk.sourceforge.io/
netatalk.sourceforge.io/2.0/htmldocs/afpd.8.html
netatalk.sourceforge.io/3.1/htmldocs/afpd.8.html
netatalk.sourceforge.io/CVE-2023-42464.php
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.18/community.yaml
www.debian.org/security/2023/dsa-5503