CVE-2022-0194

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ad_addcomment function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15876.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-01968.8phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-01978.8phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-01987.1corenlp is vulnerable to Improper Restriction of XML External Entity Reference CVE-2022-01994.3The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowi CVE-2022-02005.4Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the r CVE-2022-02016.1The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escap CVE-2022-02035.3Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.CVE-2022-02048.8A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially craft CVE-2022-02055.4The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as autho CVE-2022-02066.1The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, lead CVE-2022-02074.7A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear t CVE-2022-02086.1The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad