ZDI-CAN-17646: ZDI-23-094: Netatalk dsi_writeinit Heap-based Buffer Overflow Remote Code Execution Vulnerability
First published: Mon Feb 06 2023(Updated: )
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netatalk Netatalk |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Netatalk vulnerability?
The vulnerability ID for this Netatalk vulnerability is ZDI-CAN-17646.
What is the severity of the ZDI-CAN-17646 vulnerability?
The severity of the ZDI-CAN-17646 vulnerability is critical, with a severity value of 9.8.
How can remote attackers exploit the ZDI-CAN-17646 vulnerability?
Remote attackers can exploit the ZDI-CAN-17646 vulnerability to execute arbitrary code on affected installations of Netatalk, without requiring authentication.
Which function within Netatalk is affected by the ZDI-CAN-17646 vulnerability?
The specific flaw exists within the dsi_writeinit function in Netatalk.
Are there any references available for the ZDI-CAN-17646 vulnerability?
Yes, you can find references for the ZDI-CAN-17646 vulnerability at the following links: [link1], [link2], [link3].
- collector/zdi-published
- alias/ZDI-CAN-17646
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-23-094
- alias/CVE-2022-43634
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/title
- agent/tags
- agent/type
- agent/description
- agent/event
- vendor/netatalk
- canonical/netatalk netatalk