CVE-2018-1160: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2018-1160 is a high (CVSS 10.0) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 86.54% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 5 public exploits are recorded.
Timeline
- 20-12-2018PublishedVulnerability first disclosed.
- 13-02-2026Last modifiedVulnerability information updated.
Description
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.
CVSS metrics
7 scores · 4 sources · 3 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
86.54%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 86.54% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (tenable.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Netatalk 3.1.12 - Authentication Bypass (PoC)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse7 products
- netatalk&distro=SUSE Linux Enterprise Desktop 12 SP3< 3.1.0-3.3.1
- netatalk&distro=SUSE Linux Enterprise Desktop 12 SP4< 3.1.0-3.3.1
- netatalk&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 2.0.3-249.23.3.1
- netatalk&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 3.1.0-3.3.1
- netatalk&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 3.1.0-3.3.1
Synology4 products
- diskstation_manager≥ 5.2, < 5.2-5967-9 | ≥ 6.1, < 6.1.7-15284-3 | ≥ 6.2, < 6.2.1-23824-4
- router_manager≥ 1.2, < 1.2-7742-5
- skynasna
- vs960hd_firmwarena
Debian2 products
- netatalk< 2.2.6-2 | < 2.2.5-2+deb9u1
- debian_linuxEOL9.0
Mageia1 product
- netatalk< 3.1.12-1.1.mga6
Netatalk1 product
- netatalk< 3.1.12
Ubuntu1 product
- netatalk< 2.2.2-1ubuntu2.2 | < 2.2.5-1ubuntu0.2 | < 2.2.6-1ubuntu0.18.04.2
6 vendors · 16 products
References
21 links- github.com/tenable/poc/tree/master/netatalk/cve_2018_1160/X Refsource MISCRelease NotesThird Party AdvisoryREPORT
- www.tenable.com/security/research/tra-2018-48X Refsource MISCExploitRelease NotesThird Party AdvisoryREPORT
Show all 21 references
- packetstormsecurity.com/files/152440/QNAP-Netatalk-Authentication-Bypass.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry