[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVgZzc50NRPIy_HsI7bYlXgMd8-BhWzi9End7yI6SOk4":3,"g5a-risk:CVE-2018-1160":227},{"success":4,"data":5,"meta":225},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":15,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":67,"references":68,"referencesCount":137,"weaknesses":138,"weaknessesCount":147,"isActivelyExploited":148,"cisaInfo":15,"otxData":15,"relatedBlogPosts":149,"seoMetadata":150,"configurations":175,"relatedVendorCves":223,"notableEvents":224},"CVE-2018-1160","What is CVE-2018-1160?","Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.","Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remot...","2018-12-20T21:29:00.477","2025-01-14T19:29:55.853",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.86539,[37,37,37,37,37,37,37],"Critical",[41,45,49,53,56,59,62],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"netatalk","*","cpe:2.3:a:netatalk:netatalk:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":43,"criteria":48,"vulnerable":4},"synology","router_manager","cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",{"vendor":46,"product":50,"version":51,"criteria":52,"vulnerable":4},"skynas","-","cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*",{"vendor":46,"product":54,"version":43,"criteria":55,"vulnerable":4},"diskstation_manager","cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",{"vendor":46,"product":57,"version":51,"criteria":58,"vulnerable":4},"vs960hd_firmware","cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",{"vendor":46,"product":60,"version":51,"criteria":61,"vulnerable":4},"vs960hd","cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",7,[69,74,81,85,89,93,97,101,104,107,111,115,117,119,121,123,125,127,129,131,133,135],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fnetatalk.sourceforge.net\u002F3.1\u002FReleaseNotes3.1.12.html","Sourceforge",[73],"Release Notes",{"url":75,"source":76,"tags":77},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152440\u002FQNAP-Netatalk-Authentication-Bypass.html","Packetstormsecurity",[78,79,80],"Exploit","Third Party Advisory","VDB Entry",{"url":82,"source":83,"tags":84},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106301","Securityfocus",[79,80],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fattachments.samba.org\u002Fattachment.cgi?id=14735","Samba",[79],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fgithub.com\u002Ftenable\u002Fpoc\u002Ftree\u002Fmaster\u002Fnetatalk\u002Fcve_2018_1160\u002F","GitHub",[73,79],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4356","Debian",[79],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46034\u002F","Exploit-db",[78,79,80],{"url":102,"source":99,"tags":103},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46048\u002F",[78,79,80],{"url":105,"source":99,"tags":106},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46675\u002F",[78,79,80],{"url":108,"source":109,"tags":110},"https:\u002F\u002Fwww.synology.com\u002Fsecurity\u002Fadvisory\u002FSynology_SA_18_62","Synology",[79],{"url":112,"source":113,"tags":114},"https:\u002F\u002Fwww.tenable.com\u002Fsecurity\u002Fresearch\u002Ftra-2018-48","Tenable",[78,73,79],{"url":70,"source":71,"tags":116},[73],{"url":75,"source":76,"tags":118},[78,79,80],{"url":82,"source":83,"tags":120},[79,80],{"url":86,"source":87,"tags":122},[79],{"url":90,"source":91,"tags":124},[73,79],{"url":94,"source":95,"tags":126},[79],{"url":98,"source":99,"tags":128},[78,79,80],{"url":102,"source":99,"tags":130},[78,79,80],{"url":105,"source":99,"tags":132},[78,79,80],{"url":108,"source":109,"tags":134},[79],{"url":112,"source":113,"tags":136},[78,73,79],22,[139],{"id":140,"name":141,"description":142,"extendedDescription":143,"status":144,"abstraction":145,"structure":146},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":151,"metaDescription":152,"keywords":153,"canonicalUrl":154,"structuredData":155},"What is CVE-2018-1160? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1160, a critical severity cyber security vulnerability from 2018. High exploit probability (86.5%). Netatalk before 3.1.12...","CVE-2018-1160, CVE-2018-1160 vulnerability, CVE-2018-1160 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, netatalk security, synology security, debian security, netatalk vulnerability, router_manager vulnerability, skynas vulnerability, diskstation_manager vulnerability, vs960hd_firmware vulnerability","\u002Fwhat-is\u002Fcve-2018-1160",{"@context":156,"@type":157,"headline":151,"description":152,"datePublished":10,"dateModified":11,"author":158,"publisher":162,"about":166,"mainEntityOfPage":170,"articleSection":173,"keywords":174},"https:\u002F\u002Fschema.org","TechArticle",{"@type":159,"name":160,"url":161},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":159,"name":160,"url":161,"logo":163},{"@type":164,"url":165},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":167,"name":6,"description":168,"additionalType":169},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":171,"@id":172},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1160","Cybersecurity","CVE-2018-1160, CVE-2018-1160 vulnerability, CVE-2018-1160 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[176,184,206,217],{"Operator":15,"Negate":15,"Nodes":177},[178],{"Operator":179,"Negate":15,"CPEMatch":180},"OR",[181],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":182,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":183,"VersionEndIncluding":15},"932BF878-A6E6-42A0-859F-0CD36B714BCF","3.1.12",{"Operator":15,"Negate":15,"Nodes":185},[186],{"Operator":179,"Negate":15,"CPEMatch":187},[188,192,194,198,202],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":190,"VersionEndExcluding":191,"VersionEndIncluding":15},"D739D2E3-0ABD-49F3-AF8A-36625EA1FA66","1.2","1.2-7742-5",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":193,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7C997777-BE79-4F77-90D7-E1A71D474D88",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":195,"VersionStartExcluding":15,"VersionStartIncluding":196,"VersionEndExcluding":197,"VersionEndIncluding":15},"2CEC1DBB-50FB-42AD-A991-DED424DECD70","5.2","5.2-5967-9",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":200,"VersionEndExcluding":201,"VersionEndIncluding":15},"A43B6AE6-3E09-4CF9-A249-773DC1AE0651","6.1","6.1.7-15284-3",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":203,"VersionStartExcluding":15,"VersionStartIncluding":204,"VersionEndExcluding":205,"VersionEndIncluding":15},"15151E65-8462-44F0-8B4E-288266AE4B0A","6.2","6.2.1-23824-4",{"Operator":207,"Negate":15,"Nodes":208},"AND",[209,213],{"Operator":179,"Negate":15,"CPEMatch":210},[211],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":212,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3D0C5120-B961-440F-B454-584BC54B549C",{"Operator":179,"Negate":15,"CPEMatch":214},[215],{"Vulnerable":15,"Criteria":61,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1CCBDFF9-AF42-4681-879B-CF789EBAD130",{"Operator":15,"Negate":15,"Nodes":218},[219],{"Operator":179,"Negate":15,"CPEMatch":220},[221],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":222,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":226,"version":33},1792265387607,{"score":228,"band":229,"action":230,"scoredAt":231},78,"High","Patch now","2026-10-16T06:45:18.281731+00:00"]