Описание
Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended metadata namespace via crafted EA names.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4.5.0~ds-3 |
| esm-apps-legacy/xenial | released | 2.2.5-1ubuntu0.2+esm4 |
| esm-apps/bionic | released | 2.2.6-1ubuntu0.18.04.2+esm4 |
| esm-apps/focal | released | 3.1.12~ds-4ubuntu0.20.04.4+esm2 |
| esm-apps/jammy | released | 3.1.12~ds-9ubuntu0.22.04.4+esm2 |
| esm-apps/noble | released | 3.1.18~ds-1ubuntu0.1~esm3 |
| esm-apps/resolute | released | 4.2.3~ds-2.1ubuntu0.2 |
| esm-infra-legacy/trusty | released | 2.2.2-1ubuntu2.2+esm4 |
| jammy | needed | |
| noble | needed |
Показывать по
EPSS
7.6 High
CVSS3
Связанные уязвимости
Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended metadata namespace via crafted EA names.
Incomplete sanitization of extended attribute (EA) path components in ...
Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended metadata namespace via crafted EA names.
EPSS
7.6 High
CVSS3