SUSE CVE-2026-44073

Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid, which may allow a remote authenticated attacker to retain elevated privileges under error conditions...

SUSE CVE-2026-44072

Netatalk 2.2.1 through 4.4.2 calls system after a failed chdir without properly handling the error condition, which allows a local privileged user to execute unintended commands or cause a minor service disruption under specific conditions...

SUSE CVE-2026-44074

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths...

SUSE CVE-2026-44075

A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPTATTNQUANT switch case to fall through into DSIOPTSERVQUANT, resulting in unintended session option handling that may allow a remote attacker to cause a minor service disruption via crafted DSI...

SUSE CVE-2026-44076

Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path...

CVE-2026-44063

A flaw was found in Netatalk. This vulnerability, an LDAP filter injection, allows a remote attacker with low privileges to manipulate LDAP queries. This could lead to the disclosure of sensitive information or unauthorized modification of data within the LDAP directory...

CVE-2026-44050

A flaw was found in Netatalk. A heap buffer overflow vulnerability exists within the commrcv function of the cnid daemon. This flaw could allow a remote attacker with low privileges to execute arbitrary code on the affected system. Successful exploitation can lead to a complete compromise of the...

CVE-2026-44047

A flaw was found in Netatalk. This vulnerability, identified as a SQL injection in the MySQL CNID backend, could allow a remote attacker to execute arbitrary code or gain unauthorized access to sensitive information. Successful exploitation could lead to significant data compromise, data...

CVE-2026-44055

A flaw was found in Netatalk. A bitwise or logic bug allows for shell injection. This vulnerability can enable an attacker to execute arbitrary code on the affected system...

CVE-2026-44060

A flaw was found in Netatalk. A remote attacker could exploit an integer underflow vulnerability in the dsiwriteinit function by sending a specially crafted request. This could lead to a denial of service DoS, making the service unavailable to legitimate users...

CVE-2026-44076

A flaw was found in Netatalk. A local user with high privileges could exploit this vulnerability by injecting shell commands through a crafted volume path. This shell injection could lead to arbitrary code execution, allowing the attacker to gain full control over the affected system...

CVE-2026-44070

A flaw was found in Netatalk. An attacker with low privileges could exploit an unbounded reallocation realloc vulnerability during charset conversion. This could lead to a Denial of Service DoS due to excessive memory consumption...

CVE-2026-44053

A flaw was found in Netatalk. Weak cryptography in the dhcast128 User Authentication Module UAM allows a remote attacker to potentially compromise the confidentiality and integrity of data. This vulnerability could enable unauthorized access to sensitive information or allow for the manipulation ...

CVE-2026-44075

A flaw was found in Netatalk. A missing break statement in the DSI OpenSession processing allows a remote attacker to cause a minor service disruption. This occurs when a DSIOPTATTNQUANT switch case falls through into DSIOPTSERVQUANT, leading to unintended session option handling via crafted DSI...

CVE-2026-44069

A flaw was found in Netatalk. A local attacker with high privileges could exploit an integer underflow vulnerability in the volxlate function. This flaw may lead to information disclosure, data corruption, or a denial of service due to improper handling of integer values...

CVE-2026-44072

A flaw was found in Netatalk. A highly privileged local attacker could exploit a vulnerability where the system function is called after a failed chdir operation. This could lead to unintended command execution, potentially resulting in low impact to system integrity or availability...

CVE-2026-44056

A flaw was found in Netatalk. A remote attacker with low privileges could exploit a stack buffer overflow vulnerability in the desktop.c component. This could lead to a denial of service DoS, making the service unavailable, and potentially result in limited information disclosure or integrity...

CVE-2026-44067

A flaw was found in Netatalk. An attacker could exploit a heap over-read vulnerability during extended attribute ea header parsing. This flaw may lead to information disclosure or a denial of service DoS...

CVE-2026-44068

A flaw was found in Netatalk. Incomplete sanitization of extended attribute ea paths allows a remote attacker to perform a path traversal. This vulnerability could enable an attacker to access or modify arbitrary files outside of the intended directory, leading to a high impact on data integrity...

CVE-2026-44062

A flaw was found in Netatalk. A remote attacker could exploit a missing bounds check in the pullcharsetflags function. This vulnerability could lead to arbitrary code execution or a denial of service, severely impacting the confidentiality, integrity, and availability of the affected system...