CVE:CVE-2018-1160
CNNVD:CNNVD-201812-955
Netatalk是一款用于在Linux平台上提供Appletalk网络协议服务的服务器。
Netatalk 3.1.12之前版本中的dsi_opensess.c文件存在越界写入漏洞，该漏洞源于程序对攻击者控制的数据缺少边界检查。远程攻击者可利用该漏洞执行任意代码。
solution:Upgrade netatalk_project netatalk to a higher version than 3.1.12,and avoid the version (,3.1.12); Upgrade synology diskstation_manager to a higher version than 5.2-5967-9,6.1.7-15284-3,6.2.1-23824-4,and avoid the version [5.2,5.2-5967-9),[6.1,6.1.7-15284-3),[6.2,6.2.1-23824-4); Upgrade synology router_manager to a higher version than 1.2-7742-5,and avoid the version [1.2,1.2-7742-5); Upgrade synology skynas to a higher version than -; Upgrade synology vs960hd_firmware to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0