PT-2024-28004
CVE-2024-38441
·
تاريخ النشر
2024-06-16
·
تاريخ التحديث
2025-03-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Netatalk versions prior to 3.2.1
Netatalk versions prior to 2.4.1
Netatalk versions prior to 3.1.19
Description
The issue is caused by an off-by-one error and resultant heap-based buffer overflow in the FPMapName function in afp mapname in etc/afpd/directory.c, due to setting ibuf[len] to '0'.
Recommendations
For versions prior to 3.2.1, update to version 3.2.1 or later.
For versions prior to 2.4.1, update to version 2.4.1 or later.
For versions prior to 3.1.19, update to version 3.1.19 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾