Bug 881259 (CVE-2022-45188) – <net-fs/netatalk-3.1.17: remote code execution

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description John Helmert III 2022-11-13 23:07:55 UTC]

CVE-2022-45188:

Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS).

These are referenced:

https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.14.html
https://rushbnt.github.io/bug%20analysis/netatalk-0day/

But I don't see any mention of this CVE in any of them, and the 3.1.14
release notes URL is a 404. Not sure what's going on here.

[Comment 1 Hans de Graaff 2023-10-04 13:59:24 UTC]

This is fixed in 3.1.15: https://github.com/Netatalk/netatalk/releases/tag/netatalk-3-1-15

[Comment 2 Larry the Git Cow 2023-10-04 17:03:09 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=53b4d537e4b7ebb3ea8a61abfff6fe52d4eadc99

commit 53b4d537e4b7ebb3ea8a61abfff6fe52d4eadc99
Author:     Hans de Graaff <[e-mail]>
AuthorDate: 2023-10-04 17:02:00 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2023-10-04 17:03:05 +0000

    net-fs/netatalk: add 3.1.17
    
    Bug: https://bugs.gentoo.org/837623
    Bug: https://bugs.gentoo.org/881259
    Closes: https://bugs.gentoo.org/829098
    Signed-off-by: Hans de Graaff <[e-mail]>

 net-fs/netatalk/Manifest                           |   1 +
 .../netatalk-3.1.17-disable-ld-library-path.patch  |  34 ++++
 net-fs/netatalk/files/netatalk-3.1.17-gentoo.patch | 112 ++++++++++++++
 net-fs/netatalk/netatalk-3.1.17.ebuild             | 172 +++++++++++++++++++++
 4 files changed, 319 insertions(+)

[Comment 3 Larry the Git Cow 2023-11-01 14:47:12 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=c9c5667418b482993cc73092e63caaffa8554c8f

commit c9c5667418b482993cc73092e63caaffa8554c8f
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2023-11-01 14:46:24 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2023-11-01 14:46:58 +0000

    [ GLSA 202311-02 ] Netatalk: Multiple Vulnerabilities including root remote code execution
    
    Bug: https://bugs.gentoo.org/837623
    Bug: https://bugs.gentoo.org/881259
    Bug: https://bugs.gentoo.org/915354
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Hans de Graaff <[e-mail]>

 glsa-202311-02.xml | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)