https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:57:43 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0747 certfr-2025-avi-0747 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0747 https://cve.radiocsirt.org/vuln/euvd-2026-9397 EUVD-2026-9397 https://cve.radiocsirt.org/vuln/euvd-2026-9397 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42464 <p>A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.</p> <p>A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42464 https://cve.radiocsirt.org/vuln/ghsa-qv4g-5q5g-2vc3 <p>A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.</p> <p>A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.</p> https://cve.radiocsirt.org/vuln/ghsa-qv4g-5q5g-2vc3 https://cve.radiocsirt.org/vuln/gsd-2023-42464 gsd-2023-42464 https://cve.radiocsirt.org/vuln/gsd-2023-42464 https://cve.radiocsirt.org/vuln/suse-su-2023:3779-1 <p>Security update for netatalk</p> <p>Security update for netatalk</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3779-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42464 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: netatalk, Ubuntu:22.04:LTS: netatalk</p> <p>A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: netatalk, Ubuntu:22.04:LTS: netatalk</p> <p>A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42464