https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:15:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00621 bdu:2023-00621 https://cve.radiocsirt.org/vuln/bdu:2023-00621 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0011 certfr-2024-avi-0011 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0011 https://cve.radiocsirt.org/vuln/euvd-2026-215072 EUVD-2026-215072 https://cve.radiocsirt.org/vuln/euvd-2026-215072 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43634 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-43634 https://cve.radiocsirt.org/vuln/ghsa-fwj9-7qq8-jc93 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.</p> https://cve.radiocsirt.org/vuln/ghsa-fwj9-7qq8-jc93 https://cve.radiocsirt.org/vuln/gsd-2022-43634 gsd-2022-43634 https://cve.radiocsirt.org/vuln/gsd-2022-43634 https://cve.radiocsirt.org/vuln/suse-su-2023:0316-1 <p>Security update for netatalk</p> <p>Security update for netatalk</p> https://cve.radiocsirt.org/vuln/suse-su-2023:0316-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-43634 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: netatalk, Ubuntu:Pro:16.04:LTS: netatalk, Ubuntu:Pro:18.04:LTS: netatalk, Ubuntu:20.04:LTS: netatalk, Ubuntu:22.04:LTS: netatalk</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: netatalk, Ubuntu:Pro:16.04:LTS: netatalk, Ubuntu:Pro:18.04:LTS: netatalk, Ubuntu:20.04:LTS: netatalk, Ubuntu:22.04:LTS: netatalk</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-43634 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0018 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0018