CVE-2022-23125 : netatalk - copyapplfile Stack-based Buffer Overflow Remote Code Execution
Versions Affected : All versions prior to TrueNAS Core 12.0-U8.1.
To verify if a system isvulnerable, run afpd -v
. Systems with a version string that is not 3.1.13 or newer are vulnerable.
Description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability.