Netatalk Heap Over-Read Vulnerability in EA Header Parsing

A heap over-read vulnerability has been identified in Netatalk versions 2.1.0 through 4.4.2. This issue arises from the extended attribute header parsing, which improperly trusts on-disk entry metadata without adequately validating it against the available buffer size. The vulnerability is most relevant when local, NFS, Samba, or other non-AFP access can corrupt AppleDouble metadata. While the likely impact involves a crash or memory over-read rather than arbitrary code execution, the flaw has been assigned a low severity.

Impact

Exploitation of this vulnerability leads to a heap over-read, causing a memory over-read issue that could potentially be exploited for a heap-based memory corruption.

Remediation

Users can upgrade to Netatalk version 4.5.0 or later, which includes the necessary patch. Alternatively, for those using Netatalk 4.4.2, the patch can be applied manually by following the instructions available in the Netatalk repository.