CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne).
Description
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.18 | netatalk | 3.1.18-r0 |
| alpine 3.19 | netatalk | 3.1.18-r0 |
| alpine 3.20 | netatalk | 3.1.18-r0 |
| alpine 3.21 | netatalk | 3.1.18-r0 |
| alpine 3.22 | netatalk | 3.1.18-r0 |
| alpine 3.23 | netatalk | 3.1.18-r0 |
| alpine 3.24 | netatalk | 3.1.18-r0 |
| alpine edge | netatalk | 3.1.18-r0 |
| debian 10 | netatalk | 3.1.12~ds-3+deb10u5 |
| debian 11 | netatalk | 3.1.12~ds-8+deb11u2 |
| debian 13 | netatalk | 3.1.18~ds-1 |
| debian 14 | netatalk | 3.1.18~ds-1 |
Afficher les 18 entrées de 18 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.18 | netatalk | 3.1.18-r0 |
| alpine 3.19 | netatalk | 3.1.18-r0 |
| alpine 3.20 | netatalk | 3.1.18-r0 |
| alpine 3.21 | netatalk | 3.1.18-r0 |
| alpine 3.22 | netatalk | 3.1.18-r0 |
| alpine 3.23 | netatalk | 3.1.18-r0 |
| alpine 3.24 | netatalk | 3.1.18-r0 |
| alpine edge | netatalk | 3.1.18-r0 |
| debian 10 | netatalk | 3.1.12~ds-3+deb10u5 |
| debian 11 | netatalk | 3.1.12~ds-8+deb11u2 |
| debian 13 | netatalk | 3.1.18~ds-1 |
| debian 14 | netatalk | 3.1.18~ds-1 |
| echo | netatalk | 3.1.18~ds-1 |
| rapidfort ubuntu 20.04 | netatalk | 0:3.1.18~ds-1 |
| rapidfort ubuntu 22.04 | netatalk | 0:3.1.18~ds-1 |
| rapidfort ubuntu 24.04 | netatalk | 0:3.1.18~ds-1 |
| ubuntu 20.04-ESM | netatalk | 3.1.12~ds-4ubuntu0.20.04.3+esm1 |
| ubuntu 22.04 | netatalk | pas de correctif indiqué |
Références
- https://github.com/Netatalk/netatalk/commit/9eb6d9d0ac17dca210ccbf05476a925a6b379dfb
- https://github.com/Netatalk/netatalk/pull/509
- https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
- https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
- https://netatalk.sourceforge.io/CVE-2022-22995.php