PT-2022-27421 · Netatalk+4 · Netatalk+4

Rushbntctfer · Published 2022-11-12 · Updated 2026-03-16 · CVE-2022-45188

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.13 and earlier

Description The issue is related to a heap-based buffer overflow in the afp getappl function, which can be exploited via a crafted .appl file to achieve code execution. This provides remote root access on some platforms, such as FreeBSD, which is used for TrueNAS.

Recommendations For Netatalk versions 3.1.13 and earlier, as a temporary workaround, consider disabling the afp getappl function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using crafted .appl files in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALT-PU-2023-5918

ALT-PU-2023-5932

ALT-PU-2023-5933

ALT-PU-2024-17688

CVE-2022-45188

DLA-3426-1

DSA-5503-1

MGASA-2023-0027

SUSE-SU-2022:4360-1

SUSE-SU-2022_4360-1

USN-6146-1

ZDI-23-658

ZDI-23-659

ZDI-23-660

ZDI-26-187

Affected Products

Alt Linux

Linuxmint

Netatalk

Suse

Ubuntu

References · 58

• 🔥 https://rushbnt.github.io/bug%20analysis/netatalk-0day · Exploit
• https://osv.dev/vulnerability/DSA-5503-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-31439 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-660 · Security Note
• https://security.gentoo.org/glsa/202311-02 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-43634 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0194 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-26-187 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/688424 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45188 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-45188 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3426-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-45188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23122 · Vendor Advisory