Executive Summary

This vulnerability is a dead bounds check in the Spotlight RPC unmarshaller component of Netatalk versions 3.0.0 through 4.4.2. A dead bounds check means that the code intended to prevent out-of-bounds access is ineffective because it leads to an unreachable code path. As a result, the bounds protection does not work as expected.

This flaw may allow a remote authenticated attacker to send specially crafted Spotlight RPC requests that exploit this weakness to obtain limited information from the system.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is limited information disclosure. A remote attacker who is authenticated can exploit the dead bounds check to gain access to some information that should otherwise be protected.

The CVSS score of 3.1 indicates a low severity impact, with no impact on integrity or availability, and only limited impact on confidentiality.

Useful 0 Not Useful 0