Rushbntctfer

**Name of the Vulnerable Software and Affected Versions** Netatalk versions 3.1.13 and earlier **Description** The issue is related to a heap-based buffer overflow in the afp getappl function, which can be exploited via a crafted .appl file to achieve code execution. This provides remote root access on some platforms, such as FreeBSD, which is used for TrueNAS. **Recommendations** For Netatalk versions 3.1.13 and earlier, as a temporary workaround, consider disabling the `afp getappl` function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using crafted .appl files in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.