Netatalk Out-of-Bounds Write Vulnerability in Charset Conversion Function

A high-severity out-of-bounds write vulnerability has been identified in Netatalk versions 2.0.4 through 4.4.2. The issue arises in the 'convert_charset()' function, where improper null termination allows data to be written beyond the allocated buffer. This vulnerability could potentially lead to memory corruption or cause the process to crash.

Impact

Exploitation of this vulnerability can result in memory corruption or a process crash.

Remediation

Users can upgrade to Netatalk version 4.4.3 or later, which includes the necessary patch. Alternatively, the patch can be applied to the Netatalk 4.4.2 source tree. Netatalk administrators are advised to upgrade or apply the patch as soon as possible.