Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade netatalk | Aug 22, 2024 | Nov 12, 2022 |
| Debian | — | Upgrade netatalk | May 18, 2023 | Nov 12, 2022 |
| Gentoo Linux | — | Upgrade net-fs/netatalk. | Nov 2, 2023 | Nov 12, 2022 |
| Suse | — | Upgrade libatalk12Upgrade netatalk-develUpgrade netatalk | Dec 9, 2022 | Nov 12, 2022 |
| Ubuntu | — | Upgrade netatalk (Ubuntu Pro)Upgrade netatalk | Jun 9, 2023 | Nov 12, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub