CVE-2026-44049

CVE-2026-44049 affects Netatalk 2.0.4–4.4.2. The vulnerability is an out-of-bounds write in convert_charset() due to improper null termination, enabling a remote authenticated attacker to execute arbitrary code or cause a denial of service. A fix is available in Netatalk 4.4.3. Debian and other a...

CVE-2026-44048

A stack-based buffer overflow via UCS-2 type confusion in convertcharset in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service...

CVE-2026-44048

Netatalk 2.0.4–4.4.2 is affected by a stack-based buffer overflow due to UCS-2 type confusion in convert_charset(). Affected variants can allow a remote authenticated attacker to execute arbitrary code or cause a denial of service; the issue is fixed in Netatalk 4.4.3. Debian notes the vulnerabil...