CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-31439

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12326.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 5.8

References

Products affected by CVE-2021-31439

Netatalk » Netatalk » Version: N/A

cpe:2.3:a:netatalk:netatalk:-
Netatalk » Netatalk » Version: 1.4.99-0.20000927

cpe:2.3:a:netatalk:netatalk:1.4.99-0.20000927
Netatalk » Netatalk » Version: 1.4.99-0.20001108

cpe:2.3:a:netatalk:netatalk:1.4.99-0.20001108
Netatalk » Netatalk » Version: 1.5.0

cpe:2.3:a:netatalk:netatalk:1.5.0
Netatalk » Netatalk » Version: 1.5.1

cpe:2.3:a:netatalk:netatalk:1.5.1
Netatalk » Netatalk » Version: 1.5.1.1

cpe:2.3:a:netatalk:netatalk:1.5.1.1
Netatalk » Netatalk » Version: 1.5.2

cpe:2.3:a:netatalk:netatalk:1.5.2
Netatalk » Netatalk » Version: 1.5.3.1

cpe:2.3:a:netatalk:netatalk:1.5.3.1
Netatalk » Netatalk » Version: 1.5.5

cpe:2.3:a:netatalk:netatalk:1.5.5
Netatalk » Netatalk » Version: 1.6.0

cpe:2.3:a:netatalk:netatalk:1.6.0
Netatalk » Netatalk » Version: 1.6.1

cpe:2.3:a:netatalk:netatalk:1.6.1
Netatalk » Netatalk » Version: 1.6.2

cpe:2.3:a:netatalk:netatalk:1.6.2
Netatalk » Netatalk » Version: 1.6.3

cpe:2.3:a:netatalk:netatalk:1.6.3
Netatalk » Netatalk » Version: 1.6.4

cpe:2.3:a:netatalk:netatalk:1.6.4
Netatalk » Netatalk » Version: 2.0.0

cpe:2.3:a:netatalk:netatalk:2.0.0
Netatalk » Netatalk » Version: 2.0.1

cpe:2.3:a:netatalk:netatalk:2.0.1
Netatalk » Netatalk » Version: 2.0.2

cpe:2.3:a:netatalk:netatalk:2.0.2
Netatalk » Netatalk » Version: 2.0.3

cpe:2.3:a:netatalk:netatalk:2.0.3
Netatalk » Netatalk » Version: 2.0.4

cpe:2.3:a:netatalk:netatalk:2.0.4
Netatalk » Netatalk » Version: 2.0.5

cpe:2.3:a:netatalk:netatalk:2.0.5
Netatalk » Netatalk » Version: 2.1

cpe:2.3:a:netatalk:netatalk:2.1
Netatalk » Netatalk » Version: 2.1.1

cpe:2.3:a:netatalk:netatalk:2.1.1
Netatalk » Netatalk » Version: 2.1.2

cpe:2.3:a:netatalk:netatalk:2.1.2
Netatalk » Netatalk » Version: 2.1.3

cpe:2.3:a:netatalk:netatalk:2.1.3
Netatalk » Netatalk » Version: 2.1.4

cpe:2.3:a:netatalk:netatalk:2.1.4
Netatalk » Netatalk » Version: 2.1.5

cpe:2.3:a:netatalk:netatalk:2.1.5
Netatalk » Netatalk » Version: 2.1.6

cpe:2.3:a:netatalk:netatalk:2.1.6
Netatalk » Netatalk » Version: 2.2

cpe:2.3:a:netatalk:netatalk:2.2
Netatalk » Netatalk » Version: 2.2.1

cpe:2.3:a:netatalk:netatalk:2.2.1
Netatalk » Netatalk » Version: 2.2.10

cpe:2.3:a:netatalk:netatalk:2.2.10
Netatalk » Netatalk » Version: 2.2.2

cpe:2.3:a:netatalk:netatalk:2.2.2
Netatalk » Netatalk » Version: 2.2.3

cpe:2.3:a:netatalk:netatalk:2.2.3
Netatalk » Netatalk » Version: 2.2.4

cpe:2.3:a:netatalk:netatalk:2.2.4
Netatalk » Netatalk » Version: 2.2.5

cpe:2.3:a:netatalk:netatalk:2.2.5
Netatalk » Netatalk » Version: 2.2.6

cpe:2.3:a:netatalk:netatalk:2.2.6
Netatalk » Netatalk » Version: 2.2.7

cpe:2.3:a:netatalk:netatalk:2.2.7
Netatalk » Netatalk » Version: 2.2.7b

cpe:2.3:a:netatalk:netatalk:2.2.7b
Netatalk » Netatalk » Version: 2.2.8

cpe:2.3:a:netatalk:netatalk:2.2.8
Netatalk » Netatalk » Version: 2.2.9

cpe:2.3:a:netatalk:netatalk:2.2.9
Netatalk » Netatalk » Version: 2.2.9b

cpe:2.3:a:netatalk:netatalk:2.2.9b
Netatalk » Netatalk » Version: 3.0

cpe:2.3:a:netatalk:netatalk:3.0
Netatalk » Netatalk » Version: 3.0.1

cpe:2.3:a:netatalk:netatalk:3.0.1
Netatalk » Netatalk » Version: 3.0.2

cpe:2.3:a:netatalk:netatalk:3.0.2
Netatalk » Netatalk » Version: 3.0.3

cpe:2.3:a:netatalk:netatalk:3.0.3
Netatalk » Netatalk » Version: 3.0.4

cpe:2.3:a:netatalk:netatalk:3.0.4
Netatalk » Netatalk » Version: 3.0.5

cpe:2.3:a:netatalk:netatalk:3.0.5
Netatalk » Netatalk » Version: 3.0.6

cpe:2.3:a:netatalk:netatalk:3.0.6
Netatalk » Netatalk » Version: 3.0.7

cpe:2.3:a:netatalk:netatalk:3.0.7
Netatalk » Netatalk » Version: 3.0.8

cpe:2.3:a:netatalk:netatalk:3.0.8
Netatalk » Netatalk » Version: 3.1

cpe:2.3:a:netatalk:netatalk:3.1
Netatalk » Netatalk » Version: 3.1.1

cpe:2.3:a:netatalk:netatalk:3.1.1
Netatalk » Netatalk » Version: 3.1.10

cpe:2.3:a:netatalk:netatalk:3.1.10
Netatalk » Netatalk » Version: 3.1.11

cpe:2.3:a:netatalk:netatalk:3.1.11
Netatalk » Netatalk » Version: 3.1.12

cpe:2.3:a:netatalk:netatalk:3.1.12
Netatalk » Netatalk » Version: 3.1.2

cpe:2.3:a:netatalk:netatalk:3.1.2
Netatalk » Netatalk » Version: 3.1.3

cpe:2.3:a:netatalk:netatalk:3.1.3
Netatalk » Netatalk » Version: 3.1.4

cpe:2.3:a:netatalk:netatalk:3.1.4
Netatalk » Netatalk » Version: 3.1.5

cpe:2.3:a:netatalk:netatalk:3.1.5
Netatalk » Netatalk » Version: 3.1.6

cpe:2.3:a:netatalk:netatalk:3.1.6
Netatalk » Netatalk » Version: 3.1.7

cpe:2.3:a:netatalk:netatalk:3.1.7
Netatalk » Netatalk » Version: 3.1.8

cpe:2.3:a:netatalk:netatalk:3.1.8
Netatalk » Netatalk » Version: 3.1.9

cpe:2.3:a:netatalk:netatalk:3.1.9
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Synology » Diskstation Manager » Version: 6.2

cpe:2.3:o:synology:diskstation_manager:6.2
Synology » Diskstation Manager » Version: 6.2-23739

cpe:2.3:o:synology:diskstation_manager:6.2-23739
Synology » Diskstation Manager » Version: 6.2-23739-1

cpe:2.3:o:synology:diskstation_manager:6.2-23739-1
Synology » Diskstation Manager » Version: 6.2-23739-2

cpe:2.3:o:synology:diskstation_manager:6.2-23739-2
Synology » Diskstation Manager » Version: 6.2.1

cpe:2.3:o:synology:diskstation_manager:6.2.1
Synology » Diskstation Manager » Version: 6.2.1-23824

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824
Synology » Diskstation Manager » Version: 6.2.1-23824-1

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824-1
Synology » Diskstation Manager » Version: 6.2.1-23824-2

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824-2
Synology » Diskstation Manager » Version: 6.2.1-23824-3

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824-3
Synology » Diskstation Manager » Version: 6.2.1-23824-4

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824-4
Synology » Diskstation Manager » Version: 6.2.1-23824-5

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824-5
Synology » Diskstation Manager » Version: 6.2.1-23824-6

cpe:2.3:o:synology:diskstation_manager:6.2.1-23824-6
Synology » Diskstation Manager » Version: 6.2.2-24922

cpe:2.3:o:synology:diskstation_manager:6.2.2-24922
Synology » Diskstation Manager » Version: 6.2.3-25426-2

cpe:2.3:o:synology:diskstation_manager:6.2.3-25426-2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-31439

Products

Pricing

Contact Us