PatchTheCVEnetatalk vulnerabilities
Recent CVEs affecting netatalk products. 3 tracked.
netatalk has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-06-16. Highest priority: CVE-2024-38441 (score 59/100).
- CVE-2024-38441 CRITICAL 9.8 UPGRADE Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf
- CVE-2024-38440 HIGH 7.5 UPGRADE Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation viola
- CVE-2024-38439 CRITICAL 9.8 UPGRADE Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf
FAQ
How do I fix netatalk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netatalk being exploited right now?
None of the tracked netatalk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netatalk CVE should I patch first?
CVE-2024-38441 currently ranks highest (59/100): Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf.