{"id":"CVE-2023-42464","details":"A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.","modified":"2026-08-12T03:30:25.790066694Z","published":"2023-09-20T00:00:00Z","related":["SUSE-SU-2023:3779-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/42xxx/CVE-2023-42464.json"},"references":[{"type":"WEB","url":"https://netatalk.io/security/CVE-2023-42464"},{"type":"WEB","url":"https://netatalk.sourceforge.io/"},{"type":"WEB","url":"https://netatalk.sourceforge.io/3.1/htmldocs/afpd.8.html"},{"type":"WEB","url":"https://netatalk.sourceforge.io/CVE-2023-42464.php"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/42xxx/CVE-2023-42464.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42464"},{"type":"ADVISORY","url":"https://www.debian.org/security/2023/dsa-5503"},{"type":"REPORT","url":"https://github.com/Netatalk/netatalk/issues/486"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00031.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/netatalk/netatalk","events":[{"introduced":"0"},{"fixed":"f2e3356a3da5630434b457c90e1afb02acda394e"}],"database_specific":{"cpe":"cpe:2.3:a:netatalk:netatalk:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.1.x"},{"fixed":"3.1.17"},{"introduced":"3.1"}],"source":["DESCRIPTION","CPE_RANGE"]}}],"versions":["netatalk-3-1-16","netatalk-3-1-15","netatalk-3-1-14","netatalk-3-1-13","netatalk-3-1-12","netatalk-3-1-11","netatalk-3-1-10","netatalk-3-1-9","netatalk-3-1-8","netatalk-3-1-7","netatalk-3-1-6","netatalk-3-1-5","netatalk-3-1-4"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-42464.json"}}],"schema_version":"1.9.0"}