CVE-2024-38441

Name of the Vulnerable Software and Affected Versions Netatalk versions prior to 3.2.1 Netatalk versions prior to 2.4.1 Netatalk versions prior to 3.1.19

Description The issue is caused by an off-by-one error and resultant heap-based buffer overflow in the FPMapName function in afp mapname in etc/afpd/directory.c, due to setting ibuf[len] to '0'.

Recommendations For versions prior to 3.2.1, update to version 3.2.1 or later. For versions prior to 2.4.1, update to version 2.4.1 or later. For versions prior to 3.1.19, update to version 3.1.19 or later.