Skip to content
Noroxi

Netatalk records

17 published records for vendor netatalk.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2018-1160
    65This week

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    netatalk · netatalkDec 20, 2018

  • CVE-2022-43634
    45Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 19%

    netatalk · netatalkMar 29, 2023

  • CVE-2022-23121
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 8%

    netatalk · netatalkMar 28, 2023

  • CVE-2022-23122
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 4%

    netatalk · netatalkMar 28, 2023

  • CVE-2022-0194
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 4%

    netatalk · netatalkMar 28, 2023

  • CVE-2022-23125
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 4%

    netatalk · netatalkMar 28, 2023

  • CVE-2022-23123
    40Plan

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 3%

    netatalk · netatalkMar 28, 2023

  • CVE-2022-23124
    40Plan

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.

    CriticalCVSS 9.8No exploitEPSS 2%

    netatalk · netatalkMar 28, 2023

  • CVE-2022-22995
    40Plan

    Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk

    CriticalCVSS 9.8No exploitEPSS 2%

    westerndigital · my cloud pr2100 firmwareMar 25, 2022

  • CVE-2023-42464
    40Plan

    A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17.

    CriticalCVSS 9.8No exploitEPSS 2%

    netatalk · netatalkSep 20, 2023

  • CVE-2024-38439
    39Monitor

    Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLogin

    CriticalCVSS 9.8No exploitEPSS 0%

    netatalk · netatalkJun 16, 2024

  • CVE-2024-38441
    39Monitor

    Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in

    CriticalCVSS 9.8No exploitEPSS 0%

    netatalk · netatalkJun 16, 2024

  • CVE-2008-5718
    38Monitor

    The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers t

    CriticalCVSS 9.3No exploitEPSS 4%

    netatalk · netatalkDec 26, 2008

  • CVE-2021-31439
    36Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager.

    HighCVSS 8.8No exploitEPSS 2%

    synology · diskstation managerMay 21, 2021

  • CVE-2022-45188
    31Monitor

    Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file.

    HighCVSS 7.8No exploitEPSS 0%

    netatalk · netatalkNov 12, 2022

  • CVE-2024-38440
    30Monitor

    Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly u

    HighCVSS 7.5No exploitEPSS 0%

    netatalk · netatalkJun 16, 2024

  • CVE-2004-0974
    8Monitor

    The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files vi

    LowCVSS 2.1No exploitEPSS 0%

    netatalk · open source apple file share protocol suiteFeb 9, 2005