Описание
A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4.5.0~ds-3 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | released | 3.1.12~ds-4ubuntu0.20.04.4+esm2 |
| esm-apps/jammy | released | 3.1.12~ds-9ubuntu0.22.04.4+esm2 |
| esm-apps/noble | released | 3.1.18~ds-1ubuntu0.1~esm3 |
| esm-apps/resolute | released | 4.2.3~ds-2.1ubuntu0.2 |
| esm-infra-legacy/trusty | not-affected | code not present |
| jammy | needed | |
| noble | needed |
Показывать по
EPSS
3.1 Low
CVSS3
Связанные уязвимости
A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.
A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0. ...
A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.
EPSS
3.1 Low
CVSS3