Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 7 products
Have you ever seen a CVE and want to turn it into an exploit but don't know how? Check out my latest tutorial where I turn CVE-2018-1160 into a fully functioning exploit! Video can be found here: https://youtu.be/SOZDiB7uhdI
Post summary
The user advertises a YouTube tutorial that claims to convert CVE‑2018‑1160 into a fully functioning exploit, but no code or detailed exploit steps are included in the text.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 9.0 | - | - |
| App | netatalk | netatalk | - | - | - |
| OS | synology | diskstation_manager | - | - | - |
| App | synology | router_manager | - | - | - |
| App | synology | skynas | - | - | - |
| HW | synology | vs960hd | - | - | - |
| OS | synology | vs960hd_firmware | - | - | - |