Netatalk up to 3.1.12 ad_addcomment stack-based overflow

Summaryinfo

A vulnerability, which was classified as critical, has been found in Netatalk. This impacts the function ad_addcomment. Performing a manipulation results in stack-based overflow. This vulnerability is identified as CVE-2022-0194. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Netatalk. This affects the function ad_addcomment. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ad_addcomment function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15876.

The weakness was released 03/28/2023 as ZDI-22-530. It is possible to read the advisory at zerodayinitiative.com. This vulnerability is uniquely identified as CVE-2022-0194 since 01/11/2022. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 03/24/2026).

Upgrading to version 3.1.13 eliminates this vulnerability. The upgrade is hosted for download at netatalk.sourceforge.io.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2022-15398). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Name

• Netatalk

Version

• 1.4.99-0.20000927
• 1.4.99-0.20001108
• 1.5 Pre6
• 1.5.0
• 1.5.1
• 1.5.1.1
• 1.5.2
• 1.5.3.1
• 1.5.5
• 1.5pre3
• 1.5pre4
• 1.5pre5
• 1.5pre6
• 1.5pre7
• 1.5pre8
• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.4a
• 2.0.0
• 2.0.1
• 2.0.2
• 2.0.3
• 3.1.12

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion