2018-12-20 22:29:00 2019-10-10 01:38:11

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Netatalk project Netatalk 1.5.0 (not an official CPE) Netatalk project Netatalk 1.4.99-0.20001108 (not an official CPE) Netatalk project Netatalk 1.4.99-0.20000927 (not an official CPE) Netatalk project Netatalk 1.5.1 (not an official CPE) Netatalk project Netatalk 1.5.1.1 (not an official CPE) Netatalk project Netatalk 1.5.2 (not an official CPE) Netatalk project Netatalk 1.5.3.1 (not an official CPE) Netatalk project Netatalk 1.5.5 (not an official CPE) Netatalk project Netatalk 1.6.0 (not an official CPE) Netatalk project Netatalk 1.6.1 (not an official CPE) Netatalk project Netatalk 1.6.2 (not an official CPE) Netatalk project Netatalk 1.6.3 (not an official CPE) Netatalk project Netatalk 1.6.4 (not an official CPE) Netatalk project Netatalk 1.6.4 Alpha1 (not an official CPE) Netatalk project Netatalk 2.0.0 (not an official CPE) Netatalk project Netatalk 2.0.1 (not an official CPE) Netatalk project Netatalk 2.0.2 (not an official CPE) Netatalk project Netatalk 2.0.3 (not an official CPE) Netatalk project Netatalk 2.0.4 (not an official CPE) Netatalk project Netatalk 2.0.5 (not an official CPE) Netatalk project Netatalk 2.1 (not an official CPE) Netatalk project Netatalk 2.1.1 (not an official CPE) Netatalk project Netatalk 2.1.2 (not an official CPE) Netatalk project Netatalk 2.1.3 (not an official CPE) Netatalk project Netatalk 2.1.4 (not an official CPE) Netatalk project Netatalk 2.1.5 (not an official CPE) Netatalk project Netatalk 2.1.6 (not an official CPE) Netatalk project Netatalk 2.2 (not an official CPE) Netatalk project Netatalk 2.2.1 (not an official CPE) Netatalk project Netatalk 2.2.2 (not an official CPE) Netatalk project Netatalk 2.2.3 (not an official CPE) Netatalk project Netatalk 2.2.4 (not an official CPE) Netatalk project Netatalk 2.2.5 (not an official CPE) Netatalk project Netatalk 3.0 (not an official CPE) Netatalk project Netatalk 3.0.1 (not an official CPE) Netatalk project Netatalk 3.0.2 (not an official CPE) Netatalk project Netatalk 3.0.3 (not an official CPE) Netatalk project Netatalk 3.0.4 (not an official CPE) Netatalk project Netatalk 3.0.5 (not an official CPE) Netatalk project Netatalk 3.0.6 (not an official CPE) Netatalk project Netatalk 3.0.7 (not an official CPE) Netatalk project Netatalk 3.0.8 (not an official CPE) Netatalk project Netatalk 3.1 (not an official CPE) Netatalk project Netatalk 3.1.1 (not an official CPE) Netatalk project Netatalk 3.1.2 (not an official CPE) Netatalk project Netatalk 3.1.3 (not an official CPE) Netatalk project Netatalk 3.1.4 (not an official CPE) Netatalk project Netatalk 3.1.5 (not an official CPE) Netatalk project Netatalk 3.1.6 (not an official CPE) Netatalk project Netatalk 3.1.7 (not an official CPE) Netatalk project Netatalk 3.1.8 (not an official CPE) Netatalk project Netatalk 3.1.9 (not an official CPE) Netatalk project Netatalk 3.1.10 (not an official CPE) Netatalk project Netatalk 3.1.11 (not an official CPE) Synology Diskstation manager 5.2 (not an official CPE) Synology Diskstation manager 5.2-5565 (not an official CPE) Synology Diskstation manager 5.2-5565-1 (not an official CPE) Synology Diskstation manager 5.2-5565-2 (not an official CPE) Synology Diskstation manager 5.2-5592 (not an official CPE) Synology Diskstation manager 5.2-5592-1 (not an official CPE) Synology Diskstation manager 5.2-5592-2 (not an official CPE) Synology Diskstation manager 5.2-5592-3 (not an official CPE) Synology Diskstation manager 5.2-5592-4 (not an official CPE) Synology Diskstation manager 5.2-5620 (not an official CPE) Synology Diskstation manager 5.2-5644 (not an official CPE) Synology Diskstation manager 5.2-5644-1 (not an official CPE) Synology Diskstation manager 5.2-5644-2 (not an official CPE) Synology Diskstation manager 5.2-5644-3 (not an official CPE) Synology Diskstation manager 5.2-5644-5 (not an official CPE) Synology Diskstation manager 5.2-5644-8 (not an official CPE) Synology Diskstation manager 5.2-5967 (not an official CPE) Synology Diskstation manager 5.2-5967-1 (not an official CPE) Synology Diskstation manager 5.2-5967-2 (not an official CPE) Synology Diskstation manager 5.2-5967-3 (not an official CPE) Synology Diskstation manager 5.2-5967-4 (not an official CPE) Synology Diskstation manager 5.2-5967-5 (not an official CPE) Synology Diskstation manager 5.2-5967-6 (not an official CPE) Synology Diskstation manager 5.2-5967-7 (not an official CPE) Synology Diskstation manager 5.2-5967-8 (not an official CPE) Synology Diskstation manager 6.1 (not an official CPE) Synology Diskstation manager 6.1-15047 (not an official CPE) Synology Diskstation manager 6.1-15047-1 (not an official CPE) Synology Diskstation manager 6.1-15047-2 (not an official CPE) Synology Diskstation manager 6.1.1 (not an official CPE) Synology Diskstation manager 6.1.1-15101 (not an official CPE) Synology Diskstation manager 6.1.1-15101-1 (not an official CPE) Synology Diskstation manager 6.1.1-15101-2 (not an official CPE) Synology Diskstation manager 6.1.1-15101-3 (not an official CPE) Synology Diskstation manager 6.1.1-15101-4 (not an official CPE) Synology Diskstation manager 6.1.2-15132 (not an official CPE) Synology Diskstation manager 6.1.2-15132-1 (not an official CPE) Synology Diskstation manager 6.1.3-15152 (not an official CPE) Synology Diskstation manager 6.1.3-15152-1 (not an official CPE) Synology Diskstation manager 6.1.3-15152-3 (not an official CPE) Synology Diskstation manager 6.1.3-15152-4 (not an official CPE) Synology Diskstation manager 6.1.3-15152-5 (not an official CPE) Synology Diskstation manager 6.1.3-15152-6 (not an official CPE) Synology Diskstation manager 6.1.3-15152-7 (not an official CPE) Synology Diskstation manager 6.1.3-15152-8 (not an official CPE) Synology Diskstation manager 6.1.4-15217 (not an official CPE) Synology Diskstation manager 6.1.4-15217-1 (not an official CPE) Synology Diskstation manager 6.1.4-15217-2 (not an official CPE) Synology Diskstation manager 6.1.4-15217-3 (not an official CPE) Synology Diskstation manager 6.1.4-15217-4 (not an official CPE) Synology Diskstation manager 6.1.4-15217-5 (not an official CPE) Synology Diskstation manager 6.1.6-15266 (not an official CPE) Synology Diskstation manager 6.1.7-15284 (not an official CPE) Synology Diskstation manager 6.1.7-15284-1 (not an official CPE) Synology Diskstation manager 6.1.7-15284-2 (not an official CPE) Synology Diskstation manager 6.2 (not an official CPE) Synology Diskstation manager 6.2-23739 (not an official CPE) Synology Diskstation manager 6.2-23739-1 (not an official CPE) Synology Diskstation manager 6.2-23739-2 (not an official CPE) Synology Diskstation manager 6.2.1 (not an official CPE) Synology Diskstation manager 6.2.1-23824 (not an official CPE) Synology Diskstation manager 6.2.1-23824-1 (not an official CPE) Synology Diskstation manager 6.2.1-23824-2 (not an official CPE) Synology Diskstation manager 6.2.1-23824-3 (not an official CPE) Synology Router manager 1.2-7742 (not an official CPE) Synology Router manager 1.2-7742-1 (not an official CPE) Synology Router manager 1.2-7742-2 (not an official CPE) Synology Router manager 1.2-7742-3 (not an official CPE) Synology Router manager 1.2-7742-4 (not an official CPE) Synology Skynas - (not an official CPE)