Netatalk up to 3.1.12 setfilparams stack-based overflow

Summaryinfo

A vulnerability, which was classified as critical, was found in Netatalk. Affected is the function setfilparams. Executing a manipulation can lead to stack-based overflow. This vulnerability is tracked as CVE-2022-23122. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in Netatalk and classified as very critical. This vulnerability affects the function setfilparams. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15837.

The weakness was disclosed 03/28/2023 as ZDI-22-529. The advisory is shared for download at zerodayinitiative.com. This vulnerability was named CVE-2022-23122 since 01/11/2022. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 04/29/2026).

Upgrading to version 3.1.13 eliminates this vulnerability. The upgrade is hosted for download at netatalk.sourceforge.io.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2022-28213). Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• Netatalk

Version

• 1.4.99-0.20000927
• 1.4.99-0.20001108
• 1.5 Pre6
• 1.5.0
• 1.5.1
• 1.5.1.1
• 1.5.2
• 1.5.3.1
• 1.5.5
• 1.5pre3
• 1.5pre4
• 1.5pre5
• 1.5pre6
• 1.5pre7
• 1.5pre8
• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.4a
• 2.0.0
• 2.0.1
• 2.0.2
• 2.0.3
• 3.1.12

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion