Netatalk Stack Buffer Overflow Vulnerability in Charset Conversion Function

A stack buffer overflow vulnerability has been identified in Netatalk versions 2.0.4 through 4.4.2. This issue arises from a type confusion related to UCS-2 encoding in the 'convert_charset()' function, allowing for potential memory corruption. An authenticated client could exploit this vulnerability, possibly leading to a process crash or more extensive memory corruption.

Impact

Exploitation of this vulnerability can cause a process crash, with the potential for more severe memory corruption effects.

Remediation

Users can upgrade to Netatalk version 4.4.3 or later, which includes the necessary patch. Alternatively, the patch can be applied to a Netatalk 4.4.2 source tree.