CVE-2022-43634
published 2023-03-29CVE-2022-43634: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this…
PriorityP276critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
18.90%
96.9th percentile
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | netatalk | < netatalk 3.1.12~ds-8+deb11u1 (bullseye) | netatalk 3.1.12~ds-8+deb11u1 (bullseye) |
| netatalk | netatalk | — | — |
| netatalk | netatalk | >= 0 < 3.1.12~ds-8+deb11u1 | 3.1.12~ds-8+deb11u1 |
| netatalk | netatalk | >= 0 < 3.1.15~ds-1 | 3.1.15~ds-1 |
| netatalk | netatalk | >= 0 < 3.1.15~ds-1 | 3.1.15~ds-1 |
| netatalk | netatalk | >= 0 < 3.1.12~ds-4ubuntu0.20.04.1 | 3.1.12~ds-4ubuntu0.20.04.1 |
| netatalk | netatalk | >= 0 < 3.1.12~ds-9ubuntu0.22.04.1 | 3.1.12~ds-9ubuntu0.22.04.1 |
| netatalk | netatalk | >= 0 < 2.2.2-1ubuntu2.2+esm1 | 2.2.2-1ubuntu2.2+esm1 |
| netatalk | netatalk | >= 0 < 2.2.5-1ubuntu0.2+esm1 | 2.2.5-1ubuntu0.2+esm1 |
| netatalk | netatalk | >= 0 < 2.2.6-1ubuntu0.18.04.2+esm1 | 2.2.6-1ubuntu0.18.04.2+esm1 |
Detection & IOCsextracted from sources · hover to see the quote
- →The vulnerable function is `dsi_writeinit` in Netatalk — monitor for exploitation attempts targeting this function via unauthenticated remote DSI (Data Stream Interface) connections, which may involve oversized write requests to trigger a heap-based buffer overflow. ↗
- →No authentication is required to exploit this vulnerability — any unauthenticated connection to the Netatalk AFP service (typically TCP port 548) should be treated as a potential attack vector. ↗
- →Successful exploitation results in code execution as root — monitor for unexpected root-level process spawning from the Netatalk (afpd) daemon process. ↗
- ·Debian bullseye users must upgrade to netatalk 3.1.12~ds-8+deb11u1 or later to remediate this vulnerability. ↗
- ·Debian forky, sid, and trixie users must upgrade to netatalk 3.1.15~ds-1 or later to remediate this vulnerability. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_ubuntu8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Netatalk vulnerabilities
vendor_ubuntu·2023-06-08·CVSS 8.8
CVE-2022-23123 [HIGH] Netatalk vulnerabilities
Title: Netatalk vulnerabilities
Summary: Several security issues were fixed in Netatalk.
It was discovered that Netatalk did not properly validate the length of
user-supplied data in the DSI structures. A remote attacker could possibly
use this issue to execute arbitrary code with the privileges of the user
invoking the programs. This issue only affected Ubuntu 20.04 LTS and Ubuntu
22.04 LTS. (CVE-2021-31439)
It was discovered that Netatalk did not properly validate the length of
user-supplied data in the ad_addcomment function. A remote attacker could
possibly use this issue to execute arbitrary code with root privileges.
This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
(CVE-2022-0194)
It was discovered that Netatalk did not properly handle errors when parsing
AppleDoub
Debian
CVE-2022-43634: netatalk - This vulnerability allows remote attackers to execute arbitrary code on affected...
vendor_debian·2022·CVSS 9.8
CVE-2022-43634 [CRITICAL] CVE-2022-43634: netatalk - This vulnerability allows remote attackers to execute arbitrary code on affected...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
Scope: local
bullseye: resolved (fixed in 3.1.12~ds-8+deb11u1)
forky: resolved (fixed in 3.1.15~ds-1)
sid: resolved (fixed in 3.1.15~ds-1)
trixie: resolved (fixed in 3.1.15~ds-1)
OSV
netatalk vulnerabilities
osv·2023-06-08·CVSS 8.8
CVE-2021-31439 [HIGH] netatalk vulnerabilities
netatalk vulnerabilities
It was discovered that Netatalk did not properly validate the length of
user-supplied data in the DSI structures. A remote attacker could possibly
use this issue to execute arbitrary code with the privileges of the user
invoking the programs. This issue only affected Ubuntu 20.04 LTS and Ubuntu
22.04 LTS. (CVE-2021-31439)
It was discovered that Netatalk did not properly validate the length of
user-supplied data in the ad_addcomment function. A remote attacker could
possibly use this issue to execute arbitrary code with root privileges.
This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
(CVE-2022-0194)
It was discovered that Netatalk did not properly handle errors when parsing
AppleDouble entries. A remote attacker could possibly use this issue to
ex
GHSA
GHSA-fwj9-7qq8-jc93: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk
ghsa_unreviewed·2023-03-29
CVE-2022-43634 [CRITICAL] CWE-122 GHSA-fwj9-7qq8-jc93: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
OSV
CVE-2022-43634: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk
osv·2023-03-29·CVSS 9.8
CVE-2022-43634 [CRITICAL] CVE-2022-43634: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/Netatalk/Netatalk/pull/186https://lists.debian.org/debian-lts-announce/2023/05/msg00018.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZYWSGVA6WXREMB6PV56HAHKU7R6KPOP/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GEAFLA5L2SHOUFBAGUXIF2TZLGBXGJKT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SG6WZW5LXFVH3P7ZVZRGHUVJEMEFKQLI/https://www.debian.org/security/2023/dsa-5503https://www.zerodayinitiative.com/advisories/ZDI-23-094/https://github.com/Netatalk/Netatalk/pull/186https://lists.debian.org/debian-lts-announce/2023/05/msg00018.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZYWSGVA6WXREMB6PV56HAHKU7R6KPOP/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GEAFLA5L2SHOUFBAGUXIF2TZLGBXGJKT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SG6WZW5LXFVH3P7ZVZRGHUVJEMEFKQLI/https://www.debian.org/security/2023/dsa-5503https://www.zerodayinitiative.com/advisories/ZDI-23-094/
2023-03-29
Published