CVE-2018-1160

PoC ×5—

CVSS 3.1

9.8 critical

EPSS

87%p100

Published

Dec 20, 2018 (Dec 20, 2018)

Modified

Jun 17, 2026

Description

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.

Vendors: netatalk synology debian
Products: netatalk, router manager, skynas, diskstation manager, vs960hd firmware, debian linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (86.5%)

In the news2 stories

ASUS addressed critical flaws in some router models

Security AffairsJun 20, 06:56 UTC · Jun 20, 2023Vulnerability CVE-2023-28702 CVE-2023-28703 CVE-2023-31195+6 CVEs

ASUS Releases Patches to Fix Critical Security Bugs Impacting Multiple Router Models

The Hacker NewsJun 20, 08:39 UTC · Jun 20, 2023Model release CVE-2018-1160 CVE-2022-26376 CVE-2022-35401+6 CVEs