PT-2026-42118

Name of the Vulnerable Software and Affected Versions Netatalk versions 2.0.0 through 4.4.2 Description A heap-based buffer overflow occurs in the CNID daemon comm rcv function. This allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of...

[SECURITY] [DSA 62801] netatalk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6280-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2026 https://www.debian.org/security/faq -...

Debian dsa-62801 : a2boot - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-62801 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6280-1 [email protected]...

PT-2026-45012

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.19 through 4.4.2 Description A stack-based buffer overflow exists in the deletedir function of the afpd daemon. This occurs due to an integer underflow when calculating the remaining buffer size for path construction. The...

PT-2026-45013

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.19 through 4.4.2 Description A stack-based buffer overflow exists in the copydir function of the afpd daemon. This occurs due to an integer underflow when calculating the remaining buffer size for path construction. The...

Linux Distros Unpatched Vulnerability : CVE-2026-44056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited...

Linux Distros Unpatched Vulnerability : CVE-2026-7837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A time-of-check time-of-use TOCTOU condition in the adflush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a...

Linux Distros Unpatched Vulnerability : CVE-2026-45354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-45354 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Linux Distros Unpatched Vulnerability : CVE-2026-44048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow via UCS-2 type confusion in convertcharset in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-44068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete sanitization of extended attribute EA path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outsid...

Linux Distros Unpatched Vulnerability : CVE-2026-44050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in the CNID daemon commrcv function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2026-44062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing output length bounds check in pullcharsetflags in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cau...

Linux Distros Unpatched Vulnerability : CVE-2026-44057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-44053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or...

Linux Distros Unpatched Vulnerability : CVE-2026-44071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFYSOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote...

Linux Distros Unpatched Vulnerability : CVE-2026-45699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in...

Linux Distros Unpatched Vulnerability : CVE-2026-44076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a...

Linux Distros Unpatched Vulnerability : CVE-2026-44060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in dsiwriteinit in Netatalk 1.5.0 through 4.4.2 allows a remote unauthenticated attacker to cause a denial of service via a crafted DSI wri...

Linux Distros Unpatched Vulnerability : CVE-2026-7836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attack...

Linux Distros Unpatched Vulnerability : CVE-2026-44065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An off-by-two error in lpwrite in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service...