Test ID:	1.3.6.1.4.1.25623.1.0.124622
Category:	General
Title:	Netatalk < 3.1.18 RCE Vulnerability
Summary:	Netatalk is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Netatalk is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code. Affected Software/OS: Netatalk prior to version 3.1.18. Solution: Update to version 3.1.18 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-22995 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/ https://security.gentoo.org/glsa/202311-02 https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.