Описание
A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-apps-legacy/xenial | released | 2.2.5-1ubuntu0.2+esm3 |
| esm-apps/bionic | released | 2.2.6-1ubuntu0.18.04.2+esm3 |
| esm-apps/focal | released | 3.1.12~ds-4ubuntu0.20.04.4+esm1 |
| esm-apps/jammy | released | 3.1.12~ds-9ubuntu0.22.04.4+esm1 |
| esm-apps/noble | released | 3.1.18~ds-1ubuntu0.1~esm2 |
| esm-apps/resolute | released | 4.2.3~ds-2.1ubuntu0.1 |
| esm-infra-legacy/trusty | released | 2.2.2-1ubuntu2.2+esm3 |
| jammy | needed | |
| noble | needed |
Показывать по
EPSS
9.9 Critical
CVSS3
Связанные уязвимости
A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.
A heap-based buffer overflow in the CNID daemon comm_rcv() function in ...
A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.
EPSS
9.9 Critical
CVSS3