CVE-2022-22995

概要

参考情報

• lists.debian.org/debian-lts-announce/2024/01/msg00000.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2 · Mailing List
• security.gentoo.org/glsa/202311-02 · Issue Tracking
• westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities · Vendor Advisory
• lists.debian.org/debian-lts-announce/2024/11/msg00026.html

netatalk のその他の脆弱性

• CVE-2024-38441緊急 9.8Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in …
• CVE-2024-38440高 7.5Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly u…
• CVE-2024-38439緊急 9.8Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLogin…
• CVE-2023-42464緊急 9.8A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC …
• CVE-2022-43634緊急 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t…