Vulnerabilidades em Netatalk

41 resultados
Análise Vexday

Netatalk apresenta postura de risco elevada com 41 CVEs catalogadas, sendo 33 divulgadas nos últimos 90 dias, indicando vulnerabilidades recentes e ativas. Apesar de nenhuma estar sob exploração documentada em KEV, 7 falhas críticas (CVSS alto) merecem atenção imediata, com predominância de estouro de buffer (CWE-121) que são vetores tradicionais de comprometimento remoto. A concentração de descobertas recentes sugere exposição contínua do código-base a pesquisadores de segurança.

CVE-2026-44060HIGHInteger underflow in dsi_writeinit() leads to denial of serviceEPSS 0.3%CVE-2026-44068HIGHEA path traversal via incomplete sanitizationEPSS 0.3%CVE-2026-7835LOWFormat string argument mismatchEPSS 0.3%CVE-2026-44070LOWUnbounded realloc in charset conversionEPSS 0.3%CVE-2026-44053HIGHWeak cryptography in DHCAST128 UAMEPSS 0.3%CVE-2026-44067LOWEA header parsing heap over-readEPSS 0.3%CVE-2026-44066HIGHHeap out-of-bounds reads in Spotlight RPC unmarshallingEPSS 0.3%CVE-2026-44054MEDIUMPredictable afpd session tokenEPSS 0.3%CVE-2026-44073MEDIUMseteuid failure ignored in auth modulesEPSS 0.3%CVE-2026-7836LOWhextoint macro uppercase bugEPSS 0.3%CVE-2026-44056MEDIUMStack buffer overflow in desktop.cEPSS 0.3%CVE-2026-44052HIGHLDAP simple-bind password exposure in log outputEPSS 0.2%CVE-2026-7837LOWTOCTOU with root privilege in ad_flushEPSS 0.2%CVE-2026-44063MEDIUMLDAP filter injectionEPSS 0.2%CVE-2026-44057LOWDead bounds check in Spotlight RPC unmarshallerEPSS 0.2%CVE-2026-44064HIGHASP session ID out-of-bounds accessEPSS 0.2%CVE-2026-44076MEDIUMShell injection via volume pathEPSS 0.1%CVE-2026-44065LOWOff-by-two in papd lp_write()EPSS 0.1%CVE-2026-44069LOWInteger underflow in volxlateEPSS 0.1%CVE-2026-44072LOWsystem() after failed chdir()EPSS 0.1%