Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-45188HistoryNov 12, 2022 - 5:15 a.m.
CVE-2022-45188
2022-11-1205:15:12
Alpine Linux Development Team
security.alpinelinux.org
27
netatalk
buffer overflow
remote code execution
.appl file
freebsd
truenas
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
51.2%
Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | netatalk | < 3.1.15-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | netatalk | < 3.1.15-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | netatalk | < 3.1.15-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | netatalk | < 3.1.15-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | netatalk | < 3.1.15-r0 | UNKNOWN |
Related
debiancve
debiancve
CVE-2022-45188
2022-11-12 05:15:12
veracode
veracode
Denial Of Services (DoS)
2023-05-08 15:39:03
prion
prion
Heap overflow
2022-11-12 05:15:00
cvelist
cvelist
CVE-2022-45188
2022-11-12 00:00:00
osv
osv
CVE-2022-45188
2022-11-12 05:15:12
netatalk - security update
2023-05-17 00:00:00
netatalk vulnerabilities
2023-06-08 09:57:44
openvas
openvas
zdi
zdi
nvd
nvd
CVE-2022-45188
2022-11-12 05:15:12
cve
cve
CVE-2022-45188
2022-11-12 05:15:12
nessus
nessus
Slackware Linux 14.1 / 14.2 / 15.0 / current netatalk Vulnerability (SSA:2023-013-01)
2023-01-13 00:00:00
SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2022:4360-1)
2022-12-09 00:00:00
Fedora 36 : netatalk (2023-e714897e70)
2023-04-12 00:00:00
slackware
slackware
[slackware-security] netatalk
2023-01-13 20:39:17
[slackware-security] netatalk
2023-05-01 20:40:12
ubuntucve
ubuntucve
CVE-2022-45188
2022-11-12 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: netatalk-3.1.14-3.fc36
2023-04-12 01:39:16
[SECURITY] Fedora 38 Update: netatalk-3.1.14-3.fc38
2023-04-15 02:15:39
[SECURITY] Fedora 37 Update: netatalk-3.1.14-3.fc37
2023-04-12 01:34:37
mageia
mageia
Updated netatalk packages fix security vulnerability
2023-02-07 03:06:39
ubuntu
ubuntu
Netatalk vulnerabilities
2023-06-08 00:00:00
gentoo
gentoo
Netatalk: Multiple Vulnerabilities including root remote code execution
2023-11-01 00:00:00
debian
debian
[SECURITY] [DLA 3426-1] netatalk security update
2023-05-16 22:24:58
[SECURITY] [DSA 5503-1] netatalk security update
2023-09-20 17:47:57
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
51.2%
Related for ALPINE:CVE-2022-45188