PT-2023-28357 · Netatalk+4 · Netatalk+4

Arnaud Gatignol + 1 · Published 2023-09-16 · Updated 2024-12-26 · CVE-2023-42464

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.x through 3.1.16

Description A Type Confusion issue was found in the Spotlight RPC functions in afpd. The problem arises when parsing Spotlight RPC packets, specifically with a key-value style dictionary where keys are character strings and values can be any supported type. Due to a lack of type checking in callers of the dalloc value for key() function, a malicious actor may be able to control the value of the pointer, potentially achieving Remote Code Execution on the host.

Recommendations For Netatalk versions 3.1.x through 3.1.16, update to version 3.1.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the Spotlight RPC functions in afpd to minimize the risk of exploitation.

Fix

RCE

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

ALT-PU-2023-5918

ALT-PU-2023-5932

ALT-PU-2023-5933

ALT-PU-2024-17688

CVE-2023-42464

DLA-3584-1

DSA-5503-1

SUSE-SU-2023:3779-1

SUSE-SU-2023_3779-1

USN-6552-1

Affected Products

Alt Linux

Linuxmint

Netatalk

Suse

Ubuntu

References · 30

• https://github.com/Netatalk/netatalk/issues/486 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-42464 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-42464 · Security Note
• https://osv.dev/vulnerability/USN-6552-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42464 · Vendor Advisory
• https://netatalk.sourceforge.io/CVE-2023-42464.php · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42464 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3584-1 · Vendor Advisory
• https://debian.org/security/2023/dsa-5503 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6552-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-42464 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3779-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-42464 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-42464 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5503-1 · Vendor Advisory