CVE-2018-1160
20.12.2018, 21:29
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| netatalk | netatalk | 𝑥 < 3.1.12 |
| synology | router_manager | 1.2 ≤ 𝑥 < 1.2-7742-5 |
| synology | skynas | - |
| synology | diskstation_manager | 5.2 ≤ 𝑥 < 5.2-5967-9 |
| synology | diskstation_manager | 6.1 ≤ 𝑥 < 6.1.7-15284-3 |
| synology | diskstation_manager | 6.2 ≤ 𝑥 < 6.2.1-23824-4 |
| synology | vs960hd_firmware | - |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libatalk12 |
| ||||||||||||||||||||||
| netatalk |
|
Common Weakness Enumeration
References