Vulnerabilities > Netatalk

DATE CVE VULNERABILITY TITLE RISK
2021-05-21 CVE-2021-31439 Out-of-bounds Write vulnerability in multiple products
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager.
low complexity
synology debian netatalk CWE-787
8.8
2018-12-20 CVE-2018-1160 Out-of-bounds Write vulnerability in multiple products
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.
network
low complexity
netatalk synology debian CWE-787
critical
9.8
2008-12-26 CVE-2008-5718 OS Command Injection vulnerability in Netatalk
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
network
netatalk CWE-78
critical
9.3
2005-02-09 CVE-2004-0974 The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
local
low complexity
netatalk mandrakesoft redhat
2.1