CVE-2022-23125
Description
A flaw was found in Netatalk. This vulnerability allows remote attackers to execute arbitrary code (Remote Code Execution) in the context of root via improper validation of user-supplied data length prior to copying it to a fixed-length stack-based buffer in the copyapplfile function.
Statement
The Netatalk package has a stack-based buffer overflow vulnerability in the copyapplfile() function. This is a result of the lack of validation when handling the appl tag in the appls file when copying its information to a new file. The function reads the appl tag information length but does not validate if it's bigger than the maximum buffer size Netatalk uses to store such data, as a result an unauthenticated attacker can craft a file that'll lead to a stack-based buffer overflow when being copied resulting in a remote code execution in a high privileged context.
This vulnerability doesn't affect any supported Red Hat product.
Understanding the Weakness (CWE)
Availability
Technical Impact: Modify Memory; DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
Integrity,Confidentiality,Availability,Access Control
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands; Bypass Protection Mechanism
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy.
Integrity,Confidentiality,Availability,Access Control,Other
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands; Bypass Protection Mechanism; Other
When the consequence is arbitrary code execution, this can often be used to subvert any other security service.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
