Summary
It was discovered that Netatalk did not properly manage memory under
certain circumstances. A remote attacker could possibly use this issue to
execute arbitrary code. (CVE-2024-38439, CVE-2024-38440, CVE-2024-38441)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | netatalk | 3.1.12~ds-4ubuntu0.20.04.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | netatalk | 3.1.12~ds-9ubuntu0.22.04.4 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | netatalk | 2.2.2-1ubuntu2.2+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | netatalk | 2.2.5-1ubuntu0.2+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | netatalk | 2.2.6-1ubuntu0.18.04.2+esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | netatalk | 3.1.18~ds-1ubuntu0.1~esm1 |
Vulnerabilities 3
-
Critical 9.8
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLE…
-
Critical 9.8
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to …
-
High 7.5
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, bec…