What are you looking for ?
Mobile Search Icon
Mobile Menu Icon
RAIDON

Synology Security Advisory SA-23:03 Netatalk

None of storage company's products affected by CVE-2022-43634

This is a Press Release edited by StorageNewsletter.com on April 6, 2023 at 2:01 pm

Synology, Inc. had published a security advisory concerning a vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

Publish time: 2023-03-30 16:37:45 UTC+8
Last updated: 2023-03-30 16:37:45 UTC+8
Severity: Not affected
Status: Resolved

Abstract
None of Synology’s products are affected by CVE-2022-43634.

Affected products:

Synology Sa Netatalk F1 2303

Mitigation: None

Detail :

  • CVE-2022-43634
    • Severity: Not affected
    • CVSS3 base score: 0.0
    • CVSS3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    • This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsi_writeinit function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17646.

Reference: CVE-2022-43634

Revision:

Synology Sa Netatalk F2 2303

 

Articles_bottom
SNL Awards_2026
AIC