CVE-2021-31439

概要

参考情報

• lists.debian.org/debian-lts-announce/2023/05/msg00018.html · Mailing List
• security.gentoo.org/glsa/202311-02 · Issue Tracking
• debian.org/security/2023/dsa-5503 · Third Party Advisory
• synology.com/zh-hk/security/advisory/Synology_SA_20_26 · Vendor Advisory
• zerodayinitiative.com/advisories/ZDI-21-492 · Third Party Advisory

netatalk のその他の脆弱性

• CVE-2024-38441緊急 9.8Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in …
• CVE-2024-38440高 7.5Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly u…
• CVE-2024-38439緊急 9.8Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLogin…
• CVE-2023-42464緊急 9.8A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC …
• CVE-2022-43634緊急 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t…