Cyber Resilience

CVE-2023-42464

Memory Safety in Debian Linux 10.0 … 11.0

Published
20 September 2023
Modified
21 November 2024
Patch / advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.018 76th percentile
Risk Priority 79 floored blend · peak EPSS

Summary

CVE-2023-42464 is a critical-severity Type Confusion (CWE-843) vulnerability in Debian Debian Linux. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked in the top 24% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

A Type Confusion vulnerability exists in the Spotlight RPC functions within afpd of Netatalk 3.1.x versions prior to 3.1.17. The flaw occurs during parsing of Spotlight RPC packets that use key-value dictionaries, where callers of the dalloc_value_for_key() function perform no type checking on returned objects. This allows an attacker to manipulate pointer values, and the issue is assigned CWE-843 with a CVSS 3.1 score of 9.8.

An unauthenticated remote attacker can send specially crafted Spotlight RPC packets to an affected Netatalk server. Successful exploitation grants the ability to control memory pointers and theoretically achieve remote code execution on the host, with no user interaction or privileges required.

Public advisories, including the Netatalk security notice and the Debian LTS announcement, direct users to upgrade to Netatalk 3.1.17 or later to address the type-checking deficiency. The Netatalk project page and associated issue tracker provide the corresponding patch details.

The EPSS score remains low, with a current value of 0.0652 and a peak of 0.0770.

EU & UK References

Vulnerability Data

A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the…

more

values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
T1212 Exploitation for Credential Access Credential Access
Adversaries may exploit software vulnerabilities in an attempt to collect credentials.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2023-3420Same product: Debian Debian Linux
CVE-2023-23455Same product: Debian Debian Linux
CVE-2023-23454Same product: Debian Debian Linux
CVE-2023-4352Same product: Debian Debian Linux
CVE-2023-2724Same product: Debian Debian Linux
CVE-2023-3216Same product: Debian Debian Linux
CVE-2023-6348Same product: Debian Debian Linux
CVE-2021-21224Same product: Debian Debian Linux
CVE-2024-38441Same product: Netatalk Netatalk
CVE-2024-38440Same product: Netatalk Netatalk

Affected Assets

netatalk
netatalk
3.1 — 3.1.17
debian
debian linux
10.0, 11.0

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V1.5.2
  • V3.2.3
  • V15.3.5

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly prevent type-confusion flaws via safe typing, static analysis, and code review while the control itself addresses many additional weaknesses.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing in development can detect type-confusion vulnerabilities through fuzzing and static analysis.

prevents

Secure SDLC mandates type-safe design and review that can catch type-confusion flaws.

prevents

Application security requirements can specify strong typing and interface contracts that reduce type confusion.

prevents

Secure architecture principles promote type-safe languages and memory-safety mechanisms that mitigate type confusion.

prevents

Secure coding standards directly forbid unsafe type casts and require static-analysis checks for type confusion.

References