Threats tagged 'ghsa-j764-4v6h-pqp7'

Netatalk version 3.2.0 contains an off-by-one error in the FPMapName function within afp_mapname in etc/afp/directory.c. This error leads to a heap-based buffer overflow by setting ibuf[len] to '\0'. The vulnerability has a critical severity with a CVSS score of 9.8, indicating it can be exploited remotely without privileges or user interaction to cause high impact on confidentiality, integrity, and availability.