Поиск уязвимостей
Количество 8
Количество 8
BDU:2023-00621
Уязвимость функции dsi_writeinit реализации протокола Apple Filing Protocol Netatalk, позволяющая нарушителю выполнить произвольный код в контексте root-пользователя
ALT-PU-2023-5933
ALT-PU-2023-5933: package `netatalk` update to version 3.1.17-alt1
ALT-PU-2023-5918
ALT-PU-2023-5918: package `netatalk` update to version 3.1.17-alt1
CVE-2022-43634
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
CVE-2022-43634
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
CVE-2022-43634
This vulnerability allows remote attackers to execute arbitrary code o ...
SUSE-SU-2023:0316-1
Security update for netatalk
GHSA-fwj9-7qq8-jc93
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-00621 Уязвимость функции dsi_writeinit реализации протокола Apple Filing Protocol Netatalk, позволяющая нарушителю выполнить произвольный код в контексте root-пользователя | CVSS3: 9.8 | 19% Средний | почти 4 года назад |
| ALT-PU-2023-5933 ALT-PU-2023-5933: package `netatalk` update to version 3.1.17-alt1 | CVSS3: 9.8 | около 3 лет назад | |
| ALT-PU-2023-5918 ALT-PU-2023-5918: package `netatalk` update to version 3.1.17-alt1 | CVSS3: 9.8 | около 3 лет назад | |
 | CVE-2022-43634 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646. | CVSS3: 9.8 | 19% Средний | больше 3 лет назад |
 | CVE-2022-43634 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646. | CVSS3: 9.8 | 19% Средний | больше 3 лет назад |
| CVE-2022-43634 This vulnerability allows remote attackers to execute arbitrary code o ... | CVSS3: 9.8 | 19% Средний | больше 3 лет назад |
 | SUSE-SU-2023:0316-1 Security update for netatalk | 19% Средний | почти 4 года назад | |
| GHSA-fwj9-7qq8-jc93 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646. | CVSS3: 9.8 | 19% Средний | больше 3 лет назад |
Уязвимостей на страницу