This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-1160 →

DEBIAN-CVE-2018-1160

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data....

Original description

The description as published by the source.

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:13 netatalk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2"}]}]

Debian:14 netatalk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2"}]}]

References

advisory security-tracker.debian.org