CVE-2023-42464 Memory corruption in n/a

Critical 9.8 Published 20 Sep 2023 Updated 2 Aug 2024

A type confusion flaw in Netatalk's Spotlight RPC parsing allows remote attackers to achieve code execution via malicious packets.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-42464?

CVE-2023-42464 is a critical memory corruption vulnerability in Debian Debian Linux, published on 20 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.

Weakness: CWE-843

Which versions are affected by CVE-2023-42464?

It affects 2 products.

Linux distribution packages (2)

`netatalk` SUSE:Linux Enterprise Software Development Kit 12 SP5	All versions	`3.1.0-3.19.1`
`netatalk` SUSE:Linux Enterprise Workstation Extension 12 SP5	All versions	`3.1.0-3.19.1`

Products include Debian Debian Linux, Netatalk Netatalk.

How do I fix CVE-2023-42464?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-42464 being exploited?

There is no known exploitation of CVE-2023-42464 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2023-42464, DLA-3584-1, GHSA-qv4g-5q5g-2vc3, SUSE-SU-2023:3779-1, UBUNTU-CVE-2023-42464, USN-6552-1.