CVE-2024-38439 | Netatalk 3.2.0 Setting etc/uams/uams_pam.c FPLoginExt ibuf[PASSWDLEN] heap-based overflow

A vulnerability classified as critical has been found in Netatalk 3.2.0. This affects the function FPLoginExt of the file etc/uams/uams_pam.c of the component Setting Handler. The manipulation of the argument ibuf[PASSWDLEN] leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2024-38439. Access to the local network is required for this attack. There is no exploit available.