NetSight
IP …
high7.8

CVE-2022-45188

Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file.

Impact

Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).

Affected products

VendorProductAffected versions
NetatalkNetatalk
through 3.1.13
DebianDebian Linux
Versions 10.0, 11.0
FedoraprojectFedora
Versions 36, 37, 38

Weakness classification

CWE-787CWE-122

References