TI-2018-01076 CVE-2018-1160 · GHSA-j675-7hvj-qfw5
Out-of-bounds write in Netatalk
Priority CRITICAL 91
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.
Netatalk
Records52All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9
Exploited now
Netatalk records in CISA KEVNo Netatalk vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records in Netatalk · all components
TI-2024-25689 CVE-2024-38439 · GHSA-pcmr-ff73-xcj5
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow…
Priority HIGH 82
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c.
TI-2024-25690 CVE-2024-38440 · GHSA-52mm-rqxx-gfq6
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow…
Priority HIGH 72
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c.
TI-2022-22254 CVE-2022-45188 · GHSA-xxj8-gh7w-f786
Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code…
Priority HIGH 69
Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file.
TI-2022-21402 CVE-2022-43634 · GHSA-fwj9-7qq8-jc93
Heap-based buffer overflow in Netatalk
Priority HIGH 67
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
TI-2022-07290 CVE-2022-23121 · GHSA-8cm2-f4g9-wjfm
Improper handling of exceptional conditions in Netatalk
Priority MEDIUM 53
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
TI-2024-25691 CVE-2024-38441 · GHSA-j764-4v6h-pqp7
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow…
Priority MEDIUM 51
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c.
TI-2022-07294 CVE-2022-23125 · GHSA-fv63-w4rc-jg74
Stack-based buffer overflow in Netatalk
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
TI-2022-07292 CVE-2022-23123 · GHSA-8x8m-c4qf-453q
Out-of-bounds read in Netatalk
Priority MEDIUM 49
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.
TI-2022-07291 CVE-2022-23122 · GHSA-fr2q-h4vv-r9cc
Stack-based buffer overflow in Netatalk
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
TI-2022-00133 CVE-2022-0194 · GHSA-j2hq-24xq-xcjr
Stack-based buffer overflow in Netatalk
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
TI-2022-07170 CVE-2022-22995 · GHSA-wc8x-f5rv-3653
Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
Priority MEDIUM 48
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files.
TI-2022-07293 CVE-2022-23124 · GHSA-3fm4-2j55-fwvw
Out-of-bounds read in Netatalk
Priority MEDIUM 47
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.
TI-2008-05426 CVE-2008-5718 · GHSA-53jp-4vhp-x2vh
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe…
Priority MEDIUM 47
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as dem…
TI-2023-22629 CVE-2023-42464 · GHSA-qv4g-5q5g-2vc3
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in…
Priority MEDIUM 46
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17.
TI-2021-11568 CVE-2021-31439 · GHSA-8292-4xc6-r7cv
Heap-based buffer overflow in Synology DiskStation Manager
Priority MEDIUM 43
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager.