CVE Browser

Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()

Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()

TOCTOU with root privilege in ad_flush

Missing break in DSI OpenSession

Bitwise OR of errno values

FORTIFY_SOURCE disabled

Dead bounds check in Spotlight RPC unmarshaller

hextoint macro uppercase bug

Format string argument mismatch

Shell injection via volume path

seteuid failure ignored in auth modules

system() after failed chdir()

Unbounded realloc in charset conversion

Integer underflow in volxlate

EA path traversal via incomplete sanitization

EA header parsing heap over-read

Heap out-of-bounds reads in Spotlight RPC unmarshalling

Off-by-two in papd lp_write()

ASP session ID out-of-bounds access

LDAP filter injection

Missing o_len bounds check in pull_charset_flags()

DES-ECB auth with timing side channel

Integer underflow in dsi_writeinit() leads to denial of service

Non-reentrant privilege toggle

Authentication bypass via admin auth user