Netatalk 3.1.16

CPE Details

Netatalk 3.1.16
netatalk
netatalk
3.1.16
2023-10-25
10h49 +00:00
2023-10-25
10h49 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:netatalk:netatalk:3.1.16:*:*:*:*:*:*:*

Informations

Vendor

netatalk

Product

netatalk

Version

3.1.16

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-38439 2024-06-15 22h00 +00:00 Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c. 2.4.1 and 3.1.19 are also fixed versions.
9.8
Critical
CVE-2023-42464 2023-09-19 22h00 +00:00 A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.
9.8
Critical
CVE-2022-22995 2022-03-24 23h00 +00:00 The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
10
Critical