Advisories · Technology
netatalk.
Every CVE that names netatalk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()
- netatalk
- Memory corruption
- CVSS 7.5 High
Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()
- netatalk
- Memory corruption
- CVSS 3.7 Low
TOCTOU with root privilege in ad_flush
- Netatalk
- Race condition
- CVSS 3.7 Low
Missing break in DSI OpenSession
- Netatalk
- CWE-484
- CVSS 3.7 Low
Bitwise OR of errno values
- Netatalk
- CWE-682
- CVSS 3.7 Low
FORTIFY_SOURCE disabled
- Netatalk
- CWE-693
- CVSS 3.1 Low
Dead bounds check in Spotlight RPC unmarshaller
- Netatalk
- CWE-561
- CVSS 3.1 Low
hextoint macro uppercase bug
- Netatalk
- CWE-682
- CVSS 3.1 Low
Format string argument mismatch
- Netatalk
- Memory corruption
- CVSS 6.7 Medium
Shell injection via volume path
- Netatalk
- Command injection
- CVSS 4.0 Medium
seteuid failure ignored in auth modules
- Netatalk
- CWE-273
- CVSS 2.5 Low
system() after failed chdir()
- Netatalk
- Command injection
- CVSS 3.1 Low
Unbounded realloc in charset conversion
- Netatalk
- Denial of service
- CVSS 3.4 Low
Integer underflow in volxlate
- Netatalk
- Memory corruption
- CVSS 7.6 High
EA path traversal via incomplete sanitization
- Netatalk
- Path traversal
- CVSS 3.7 Low
EA header parsing heap over-read
- Netatalk
- Memory corruption
- CVSS 7.1 High
Heap out-of-bounds reads in Spotlight RPC unmarshalling
- Netatalk
- Memory corruption
- CVSS 3.7 Low
Off-by-two in papd lp_write()
- Netatalk
- CWE-193
- CVSS 7.1 High
ASP session ID out-of-bounds access
- Netatalk
- Memory corruption
- CVSS 4.2 Medium
LDAP filter injection
- Netatalk
- Other injection
- CVSS 7.5 High
Missing o_len bounds check in pull_charset_flags()
- Netatalk
- Memory corruption
- CVSS 5.9 Medium
DES-ECB auth with timing side channel
- Netatalk
- CWE-208
- CVSS 7.5 High
Integer underflow in dsi_writeinit() leads to denial of service
- Netatalk
- Memory corruption
- CVSS 3.9 Low
Non-reentrant privilege toggle
- Netatalk
- Race condition
- CVSS 6.4 Medium
Authentication bypass via admin auth user
- Netatalk
- Authentication bypass
- CVSS 6.0 Medium
Stack buffer overflow in desktop.c
- Netatalk
- Memory corruption
- CVSS 7.5 High
Bitwise OR logic bug enables shell injection
- Netatalk
- Command injection
- CVSS 6.5 Medium
Predictable afpd session token
- Netatalk
- Weak cryptography or TLS
- CVSS 7.4 High
Weak cryptography in DHCAST128 UAM
- Netatalk
- Weak cryptography or TLS
- CVSS 7.5 High
LDAP simple-bind password exposure in log output
- Netatalk
- Information disclosure
- CVSS 8.1 High
Arbitrary file read via attacker-controlled symlink creation
- Netatalk
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Heap buffer overflow in CNID daemon comm_rcv()
- Netatalk
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in convert_charset() null termination
- Netatalk
- Memory corruption
- CVSS 8.8 High
Stack buffer overflow via UCS-2 type confusion in convert_charset()
- Netatalk
- Memory corruption
- CVSS 8.8 High
SQL injection in MySQL CNID backend
- Netatalk
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Heap-based buffer overflow in Netatalk
- Netatalk
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Stack-based buffer overflow in Netatalk
- Netatalk
- Memory corruption
- CVSS 5.3 Medium
Out-of-bounds read in Netatalk
- Netatalk
- Memory corruption
- CVSS 5.3 Medium
Out-of-bounds read in Netatalk
- Netatalk
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Stack-based buffer overflow in Netatalk
- Netatalk
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper handling of exceptional conditions in Netatalk
- Netatalk
- CWE-755
- CVSS 9.8 CriticalCritical · CVSS 9+
Stack-based buffer overflow in Netatalk
- Netatalk
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Out-of-bounds write in Netatalk
- Netatalk
- Memory corruption