NE
Product
netatalk
51
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 13High 18Medium 9Low 10
Watch
Add netatalk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44050 | 9.9 | May 21 | Heap buffer overflow in CNID daemon comm_rcv() Affected: 2.0.0 through 4.4.2 |
| CVE-2024-38441 | 9.8 | Jun 16 | Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c Affected: 2.0.0 before 2.4.1; 3.0 before 3.1.19; 3.2.0 |
| CVE-2024-38439 | 9.8 | Jun 16 | Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c Affected: 2.0.0 before 2.4.1; 3.0.0 before 3.1.19; 3.2.0 |
| CVE-2023-42464 | 9.8 | Sep 20 | A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17 Affected: 3.1 before 3.1.17 |
| CVE-2022-43634 | 9.8 | Mar 29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: 3.1.13 |
| CVE-2022-23125 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: before 3.1.13 |
| CVE-2022-23124 | 9.8 | Mar 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk Affected: before 3.1.13 |
| CVE-2022-23123 | 9.8 | Mar 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk Affected: before 3.1.13 |
| CVE-2022-23122 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: before 3.1.13 |
| CVE-2022-23121 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: before 3.1.13 |
| CVE-2022-0194 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: before 3.1.13 |
| CVE-2022-22995 | 9.8 | Mar 25 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files Affected: before 3.1.18 |
| CVE-2018-1160 | 9.8 | Dec 20 | Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c Affected: before 3.1.12 |
Showing 13