CVE catalog

CVE-2018-1160

DEBIAN-CVE-2018-1160

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
86.54% · Oct 27, 2026

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannetatalk132.2.6-2fixed
Debiannetatalk142.2.6-2fixed
Debiannetatalk92.2.5-2vulnerable
Debiannetatalk92.2.5-2+deb9u1fixed
Ubuntunetatalk14.042.2.2-1ubuntu1vulnerable
Ubuntunetatalk14.042.2.2-1ubuntu2vulnerable
Ubuntunetatalk14.042.2.2-1ubuntu2.2fixed
Ubuntunetatalk16.042.2.5-1vulnerable
Ubuntunetatalk16.042.2.5-1ubuntu0.2fixed
Ubuntunetatalk18.042.2.6-1vulnerable
Ubuntunetatalk18.042.2.6-1ubuntu0.18.04.2fixed
Susenetatalklinux enterprise software development kit 11 sp42.0.3-249.23.3.1fixed
Susenetatalklinux enterprise desktop 12 sp33.1.0-3.3.1fixed
Susenetatalklinux enterprise desktop 12 sp43.1.0-3.3.1fixed
Susenetatalklinux enterprise software development kit 12 sp33.1.0-3.3.1fixed
Susenetatalklinux enterprise software development kit 12 sp43.1.0-3.3.1fixed
Susenetatalklinux enterprise workstation extension 12 sp33.1.0-3.3.1fixed
Susenetatalklinux enterprise workstation extension 12 sp43.1.0-3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannetatalkdeb132.2.6-2Not reportedDEBIAN-CVE-2018-1160Not reported
Debiannetatalkdeb142.2.6-2Not reportedDEBIAN-CVE-2018-1160Not reported
Debiannetatalkdeb92.2.5-2+deb9u1Not reportedDSA-4356-1Not reported
Ubuntunetatalkdeb14.042.2.2-1ubuntu2.2Not reportedUBUNTU-CVE-2018-1160Not reported
Ubuntunetatalkdeb16.042.2.5-1ubuntu0.2Not reportedUBUNTU-CVE-2018-1160Not reported
Ubuntunetatalkdeb18.042.2.6-1ubuntu0.18.04.2Not reportedUBUNTU-CVE-2018-1160Not reported
Susenetatalkrpmlinux enterprise software development kit 11 sp42.0.3-249.23.3.1Not reportedSUSE-SU-2018:4214-1Not reported
Susenetatalkrpmlinux enterprise desktop 12 sp33.1.0-3.3.1Not reportedSUSE-SU-2018:4217-1Not reported
Susenetatalkrpmlinux enterprise desktop 12 sp43.1.0-3.3.1Not reportedSUSE-SU-2018:4217-1Not reported
Susenetatalkrpmlinux enterprise software development kit 12 sp33.1.0-3.3.1Not reportedSUSE-SU-2018:4217-1Not reported
Susenetatalkrpmlinux enterprise software development kit 12 sp43.1.0-3.3.1Not reportedSUSE-SU-2018:4217-1Not reported
Susenetatalkrpmlinux enterprise workstation extension 12 sp33.1.0-3.3.1Not reportedSUSE-SU-2018:4217-1Not reported
Susenetatalkrpmlinux enterprise workstation extension 12 sp43.1.0-3.3.1Not reportedSUSE-SU-2018:4217-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 13 (Trixie)]

  • [a2boot]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [atalkd]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [libatalk]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [libatalk-dev]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [macipgw]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [netatalk]Unknown
    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [netatalk-doc]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · all · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · all · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · all · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · all · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [netatalk-tests]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [netatalk-tools]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [papd]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

  • [timelord]Unknown

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 2.2.6-2

      pypi · netatalk · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]