Description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ad_addcomment function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15876.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Netatalk | Netatalk | 3.1.12 |
References
- https://lists.debian.org/debian-lts-announce/2023/05/msg00018.htmlMailing List, Third Party Advisory
- https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.htmlRelease Notes
- https://security.gentoo.org/glsa/202311-02Issue Tracking, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5503Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-530/Third Party Advisory, VDB Entry
- https://lists.debian.org/debian-lts-announce/2023/05/msg00018.htmlMailing List, Third Party Advisory
- https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.htmlRelease Notes
- https://security.gentoo.org/glsa/202311-02Issue Tracking, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5503Third Party Advisory
- https://www.kb.cert.org/vuls/id/709991
- https://www.zerodayinitiative.com/advisories/ZDI-22-530/Third Party Advisory, VDB Entry
Timeline
- Published
- Mar 28, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified