CVE-2022-23121
Published: 21 March 2022
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parse_entries function. The issue results from the lack of proper error handling when parsing AppleDouble entries. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15819. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parse_entries function. The issue results from the lack of proper error handling when parsing AppleDouble entries. An attacker can leverage this vulnerability to execute code in the context of root.]
Notes
| Author | Note |
|---|---|
| 0xnishit | Backporting MR is still in progress and have some regression issue Backporintg MR: https://github.com/Netatalk/Netatalk/pull/173 |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
netatalk Launchpad, Ubuntu, Debian |
bionic |
Released
(2.2.6-1ubuntu0.18.04.2+esm1)
Available with Ubuntu Pro |
| focal |
Released
(3.1.12~ds-4ubuntu0.20.04.1)
|
|
| impish |
Ignored
(end of life)
|
|
| jammy |
Released
(3.1.12~ds-9ubuntu0.22.04.1)
|
|
| kinetic |
Not vulnerable
(3.1.13~ds-2)
|
|
| lunar |
Not vulnerable
(3.1.13~ds-2)
|
|
| trusty |
Released
(2.2.2-1ubuntu2.2+esm1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
| upstream |
Released
(3.1.13)
|
|
| xenial |
Released
(2.2.5-1ubuntu0.2+esm1)
Available with Ubuntu Pro |
|
|
Patches: upstream: https://github.com/Netatalk/Netatalk/commit/62d4013c62be3b1b4a14f37057cb1c8f393c5fd1 upstream: https://github.com/Netatalk/Netatalk/commit/0c0465e4e85a27105b61b3918df8f8df0565367c |
||
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 9.8 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |