Nguyễn Hoàng Thạch

A buffer overflow vulnerability in the CAPWAP daemon could allow an unauthenticated, LAN-based attacker to cause denial of service (DoS) conditions by sending a crafted request. This issue is related to a buffer overflow in the memory, which can be exploited by a remote attacker to cause a denial of service.

The Samba vfs fruit module uses extended file attributes to provide enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root. The vulnerability is related to an out-of-bounds heap read and write via specially crafted extended file attributes. The affected module is used for enhanced compatibility with Apple SMB clients and Netatalk 3 AFP file servers.