Netatalk contains muliple error and memory managment vulnerabilities

guest · Nov 16, 2022

Vulnerability Note VU#709991
Original Release Date: 2022-11-16 | Last Revised: 2022-11-16

Overview
There are six new vulnerabilities in the latest release of Netatalk (3.1.12) that could allow for Remote Code Execution as well as Out-of-bounds Read.
CVE-2022-0194 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
CVE-2022-23121 [...] CVE-2022-23122 [...]
CVE-2022-23124 [...] CVE-2022-23125 [...]
CVE-2022-23123 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.
Click to expand...

Impact
An unauthenticated, remote attacker can execute arbitrary code on affected installations of Netatalk.
Solution
Netatalk has released version 3.1.13.
Click to expand...

Log in or Sign up

Netatalk contains muliple error and memory managment vulnerabilities

guest Guest

Log in or Sign up

Netatalk contains muliple error and memory managment vulnerabilities

guest Guest

Useful Searches