CVE-2024-38441: Buffer Overflow
Last updated 12 March 2025
Other sources
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afpmapname in etc/afpd/directory.c.
— Launchpad
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afpmapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38441?
CVE-2024-38441 has a high severity due to the potential for a heap-based buffer overflow.
How do I fix CVE-2024-38441?
To fix CVE-2024-38441, upgrade to Netatalk version 3.2.1 or later.
Which versions of Netatalk are affected by CVE-2024-38441?
CVE-2024-38441 affects Netatalk versions prior to 3.2.1 and versions between 2.4.1 and 3.1.19.
What type of vulnerability is CVE-2024-38441?
CVE-2024-38441 is classified as a heap-based buffer overflow caused by an off-by-one error.
Who reported CVE-2024-38441?
CVE-2024-38441 was reported via issues on the Netatalk GitHub repository.