CVE-2026-45698

A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

EUVD-2026-60326

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45698 Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45698 Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45698

Affected: Netatalk afpd daemon (versions 3.1.19 through 4.4.2). Root cause: an unsigned integer underflow in deletedir() sets the remain size_t to SIZE_MAX, bypassing the boundary check and enabling an unbounded strcpy() of attacker-controlled filenames into a nearly full stack buffer. Impact: hi...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45698 Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45699

A flaw was found in Netatalk. An integer underflow vulnerability exists in the copydir function of the afpd daemon. This flaw occurs when a file operation crosses a device boundary within an Apple Filing Protocol AFP shared volume. Incorrect calculation of buffer size can lead to a stack-based...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699

CVE-2026-45699 affects Netatalk (afpd) on Unix-like systems, with vulnerable versions 3.1.19–4.4.2. A stack-based buffer overflow arises in copydir() due to an integer underflow when calculating remaining buffer space for path construction, causing boundary checks against de->d_name to pass an...

EUVD-2026-58790

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699 Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699 Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-44054

A flaw was found in Netatalk. A remote attacker could exploit a predictable afpd session token, which is used for managing user sessions, to cause a Denial of Service DoS. This vulnerability allows an attacker to disrupt the availability of the affected service...

CVE-2026-44054 Predictable afpd session token

Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism...

CVE-2026-44054

CVE-2026-44054 affects Netatalk 2.0.0 through 4.4.2, where AFP session tokens are derived from predictable data (process IDs), enabling a remote authenticated attacker to trigger denial of service via the reconnect mechanism. Debian and Alpine advisories align on the DoS impact and note fixes in ...