Lucene search
NCC Group EDG (Alex Plaskett, Cedric Halbronn, Aaron Adams)ZDI-22-527HistoryMar 23, 2022 - 12:00 a.m.
(Pwn2Own) Netatalk parse_entries Improper Handling of Exceptional Conditions Remote Code Execution Vulnerability
2022-03-2300:00:00
NCC Group EDG (Alex Plaskett, Cedric Halbronn, Aaron Adams)
www.zerodayinitiative.com
23
0.053 Low
EPSS
Percentile
93.1%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parse_entries function. The issue results from the lack of proper error handling when parsing AppleDouble entries. An attacker can leverage this vulnerability to execute code in the context of root.
Related
cvelist
cvelist
CVE-2022-23121
2023-03-28 00:00:00
githubexploit
githubexploit
Exploit for CVE-2022-23121
2022-05-28 05:48:35
Exploit for CVE-2022-23121
2022-05-12 20:58:01
Exploit for CVE-2022-23121
2022-05-12 20:58:01
ubuntucve
ubuntucve
CVE-2022-23121
2022-03-21 00:00:00
cve
cve
CVE-2022-23121
2023-03-28 19:15:10
debiancve
debiancve
CVE-2022-23121
2023-03-28 19:15:10
veracode
veracode
Remote Code Execution
2022-03-30 23:20:28
nvd
nvd
CVE-2022-23121
2023-03-28 19:15:10
alpinelinux
alpinelinux
CVE-2022-23121
2023-03-28 19:15:10
osv
osv
CVE-2022-23121
2023-03-28 19:15:10
netatalk - security update
2023-09-20 00:00:00
netatalk - security update
2023-05-17 00:00:00
debian
debian
[SECURITY] [DLA 3426-2] netatalk regression update
2023-06-01 17:49:40
[SECURITY] [DLA 3426-1] netatalk security update
2023-05-16 22:24:58
[SECURITY] [DSA 5503-1] netatalk security update
2023-09-20 17:47:57
prion
prion
Design/Logic Flaw
2023-03-28 19:15:00
slackware
slackware
[slackware-security] netatalk
2023-09-14 02:16:05
nessus
nessus
Slackware Linux 14.1 / 14.2 / 15.0 / current netatalk Multiple Vulnerabilities (SSA:2023-256-03)
2023-09-14 00:00:00
SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2022:1184-1)
2022-04-14 00:00:00
Debian DLA-3426-1 : netatalk - LTS security update
2023-05-17 00:00:00
openvas
openvas
mageia
mageia
Updated netatalk packages fix security vulnerability
2022-05-22 14:26:36
Updated netatalk packages fix security vulnerability
2023-02-07 03:06:39
malwarebytes
malwarebytes
cert
cert
Netatalk contains multiple error and memory management vulnerabilities
2022-11-16 00:00:00
thn
thn
QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available
2022-04-28 04:26:00
gentoo
gentoo
Netatalk: Multiple Vulnerabilities including root remote code execution
2023-11-01 00:00:00
ubuntu
ubuntu
Netatalk vulnerabilities
2023-06-08 00:00:00