Summary
Florent Saudel and Arnaud Gatignol discovered that Netatalk incorrectly
handled certain specially crafted Spotlight requests. A remote attacker could
possibly use this issue to cause heap corruption and execute arbitrary code.
(CVE-2023-42464)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | netatalk | 3.1.12~ds-4ubuntu0.20.04.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | netatalk | 3.1.12~ds-9ubuntu0.22.04.3 |
Vulnerabilities 1
-
Unscored —
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When p…
References
-
report
https://ubuntu.com/security/CVE-2023-42464