CRITICAL

CVE-2022-23125

CVSS v3

9.8

CRITICAL

EPSS Score

20.0%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15869.

Technical details

Published
3/28/2023

Frequently asked questions

What is CVE-2022-23125?

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15869.

Is CVE-2022-23125 actively exploited?

Active exploitation of CVE-2022-23125 has not been confirmed. The EPSS score is 20.0%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-23125?

CVE-2022-23125 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2022-23125 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.