critical
CVE-2022-23125
netatalk: Netatalk: Remote Code Execution via Buffer Overflow in copyapplfile function
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat. Rated lower by Ubuntu (high).
Description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15869.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.16 | netatalk | 3.1.13-r0 |
| alpine 3.17 | netatalk | 3.1.13-r0 |
| alpine 3.18 | netatalk | 3.1.13-r0 |
| alpine 3.19 | netatalk | 3.1.13-r0 |
| alpine 3.20 | netatalk | 3.1.13-r0 |
| alpine 3.21 | netatalk | 3.1.13-r0 |
| alpine 3.22 | netatalk | 3.1.13-r0 |
| alpine 3.23 | netatalk | 3.1.13-r0 |
| alpine 3.24 | netatalk | 3.1.13-r0 |
| alpine edge | netatalk | 3.1.13-r0 |
| debian 10 | netatalk | 3.1.12~ds-3+deb10u1 |
| debian 11 | netatalk | 3.1.12~ds-8+deb11u1 |
Show all 24 entries from 24 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.16 | netatalk | 3.1.13-r0 |
| alpine 3.17 | netatalk | 3.1.13-r0 |
| alpine 3.18 | netatalk | 3.1.13-r0 |
| alpine 3.19 | netatalk | 3.1.13-r0 |
| alpine 3.20 | netatalk | 3.1.13-r0 |
| alpine 3.21 | netatalk | 3.1.13-r0 |
| alpine 3.22 | netatalk | 3.1.13-r0 |
| alpine 3.23 | netatalk | 3.1.13-r0 |
| alpine 3.24 | netatalk | 3.1.13-r0 |
| alpine edge | netatalk | 3.1.13-r0 |
| debian 10 | netatalk | 3.1.12~ds-3+deb10u1 |
| debian 11 | netatalk | 3.1.12~ds-8+deb11u1 |
| debian 13 | netatalk | 3.1.13~ds-1 |
| debian 14 | netatalk | 3.1.13~ds-1 |
| echo | netatalk | 3.1.13~ds-1 |
| rapidfort ubuntu 20.04 | netatalk | 0:3.1.12~ds-9ubuntu0.22.04.1 |
| rapidfort ubuntu 22.04 | netatalk | 0:3.1.12~ds-9ubuntu0.22.04.1 |
| rapidfort ubuntu 24.04 | netatalk | 0:3.1.12~ds-9ubuntu0.22.04.1 |
| ubuntu 14.04-ESM | netatalk | 2.2.2-1ubuntu2.2+esm1 |
| ubuntu 16.04-ESM | netatalk | 2.2.5-1ubuntu0.2+esm1 |
| ubuntu 18.04-ESM | netatalk | 2.2.6-1ubuntu0.18.04.2+esm1 |
| ubuntu 20.04 | netatalk | 3.1.12~ds-4ubuntu0.20.04.1 |
| ubuntu 20.04-ESM | netatalk | 3.1.12~ds-4ubuntu0.20.04.1 |
| ubuntu 22.04 | netatalk | 3.1.12~ds-9ubuntu0.22.04.1 |
References
- https://access.redhat.com/security/cve/CVE-2022-23125
- https://kb.cert.org/vince/comm/case/267/
- https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html
- https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-23125
- https://security.gentoo.org/glsa/202311-02
- https://sourceforge.net/p/netatalk/mailman/message/37628321/
- https://ubuntu.com/security/notices/USN-6146-1