Threats tagged 'ghsa-pcmr-ff73-xcj5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2024-38439Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to Critical9.82024-06-16GCVE DatabaseCVE-2024-38439 Netatalk version 3.2.0 contains an off-by-one error in the FPLoginExt function within the login module, specifically in etc/uams/uams_pam.c. This flaw leads to a heap-based buffer overflow by setting ibuf[PASSWDLEN] to '\0'. The vulnerability has a critical severity with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Report on CVE-2024-38439 Vulnerability CWE-787 #ghsa-pcmr-ff73-xcj5	GCVE Database	2024-06-16

Page 1 of 1