Skip to content
OpenAdvisories
Critical USN-6786-1 1 CVE

netatalk vulnerabilities

Published May 28, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Netatalk did not properly protect an SMB and AFP
default configuration. A remote attacker could possibly use this issue to
execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS netatalk 3.1.12~ds-4ubuntu0.20.04.3+esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS netatalk 3.1.12~ds-9ubuntu0.22.04.3+esm1

Vulnerabilities 1

  • Critical 10.0
    CVE-2022-22995

    Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk

    The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

    Western Digital My Cloud My Cloud Home netatalk Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-22995