CVE-2022-43634

CRITICAL

Netatalk - Unauthenticated Remote Code Execution via dsi_writeinit Heap Overflow

Title source: manual

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.

References (7)

Core 7

Core References

Patch

https://github.com/Netatalk/Netatalk/pull/186

Third Party Advisory, VDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-23-094/

Mailing List, Third Party Advisory vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZYWSGVA6WXREMB6PV56HAHKU7R6KPOP/

Mailing List, Third Party Advisory vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SG6WZW5LXFVH3P7ZVZRGHUVJEMEFKQLI/

Mailing List, Third Party Advisory vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GEAFLA5L2SHOUFBAGUXIF2TZLGBXGJKT/

Mailing List mailing-list

https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html

Third Party Advisory vendor-advisory

https://www.debian.org/security/2023/dsa-5503

Scores

CVSS v3 9.8

EPSS 0.1890

EPSS Percentile 96.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-122

Status published

Products (1)

netatalk/netatalk 3.1.13

Published Mar 29, 2023

Tracked Since Feb 18, 2026