CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media).
Descripción
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.18 | netatalk | 3.1.18-r0 |
| alpine 3.19 | netatalk | 3.1.18-r0 |
| alpine 3.20 | netatalk | 3.1.18-r0 |
| alpine 3.21 | netatalk | 3.1.18-r0 |
| alpine 3.22 | netatalk | 3.1.18-r0 |
| alpine 3.23 | netatalk | 3.1.18-r0 |
| alpine 3.24 | netatalk | 3.1.18-r0 |
| alpine edge | netatalk | 3.1.18-r0 |
| debian 10 | netatalk | 3.1.12~ds-3+deb10u5 |
| debian 11 | netatalk | 3.1.12~ds-8+deb11u2 |
| debian 13 | netatalk | 3.1.18~ds-1 |
| debian 14 | netatalk | 3.1.18~ds-1 |
Mostrar las 18 entradas de 18 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.18 | netatalk | 3.1.18-r0 |
| alpine 3.19 | netatalk | 3.1.18-r0 |
| alpine 3.20 | netatalk | 3.1.18-r0 |
| alpine 3.21 | netatalk | 3.1.18-r0 |
| alpine 3.22 | netatalk | 3.1.18-r0 |
| alpine 3.23 | netatalk | 3.1.18-r0 |
| alpine 3.24 | netatalk | 3.1.18-r0 |
| alpine edge | netatalk | 3.1.18-r0 |
| debian 10 | netatalk | 3.1.12~ds-3+deb10u5 |
| debian 11 | netatalk | 3.1.12~ds-8+deb11u2 |
| debian 13 | netatalk | 3.1.18~ds-1 |
| debian 14 | netatalk | 3.1.18~ds-1 |
| echo | netatalk | 3.1.18~ds-1 |
| rapidfort ubuntu 20.04 | netatalk | 0:3.1.18~ds-1 |
| rapidfort ubuntu 22.04 | netatalk | 0:3.1.18~ds-1 |
| rapidfort ubuntu 24.04 | netatalk | 0:3.1.18~ds-1 |
| ubuntu 20.04-ESM | netatalk | 3.1.12~ds-4ubuntu0.20.04.3+esm1 |
| ubuntu 22.04 | netatalk | sin corrección indicada |
Referencias
- https://github.com/Netatalk/netatalk/commit/9eb6d9d0ac17dca210ccbf05476a925a6b379dfb
- https://github.com/Netatalk/netatalk/pull/509
- https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
- https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
- https://netatalk.sourceforge.io/CVE-2022-22995.php