Skip to content
Fencer Vulns
medium 5.3

CVE-2022-23124 json

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.

published 2023-03-28 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-28215

cvss
5.3
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
2.8%
EPSS 2.8% chance of exploitation in 30 days, percentile 86%
public exploits
0
none known

Summary

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the get_finderinfo method. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-15870.

Patch / fix

  • netatalk netatalk 3.1.13
  • netatalk Debian 14, Debian 13 3.1.13~ds-1

debian advisories DEBIAN-CVE-2022-23124

  • netatalk Ubuntu 20.04 LTS 3.1.12~ds-4ubuntu0.20.04.1
  • netatalk Ubuntu 22.04 LTS 3.1.12~ds-9ubuntu0.22.04.1

ubuntu advisories UBUNTU-CVE-2022-23124

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • netatalk Alpine 3.24, Alpine 3.23, Alpine 3.22 +6 more 3.1.13-r0

alpine advisories ALPINE-CVE-2022-23124

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Exploit prediction

2.81% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Netatalk Netatalk

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.