CVE-2018-1160

Description

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• vulnreport@tenable.com — Release Notes
• vulnreport@tenable.com — Exploit, Third Party Advisory, VDB Entry
• vulnreport@tenable.com — Third Party Advisory, VDB Entry
• vulnreport@tenable.com — Third Party Advisory
• vulnreport@tenable.com — Release Notes, Third Party Advisory
• vulnreport@tenable.com — Third Party Advisory
• vulnreport@tenable.com — Exploit, Third Party Advisory, VDB Entry
• vulnreport@tenable.com — Exploit, Third Party Advisory, VDB Entry
• vulnreport@tenable.com — Exploit, Third Party Advisory, VDB Entry
• vulnreport@tenable.com — Third Party Advisory
• vulnreport@tenable.com — Exploit, Release Notes, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes