Netatalk vulnerabilities
43 CVEs and advisories name Netatalk as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45698Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()
- CVE-2026-45699Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()
- CVE-2026-7837TOCTOU with root privilege in ad_flush
- CVE-2026-44075Missing break in DSI OpenSession
- CVE-2026-44074Bitwise OR of errno values
- CVE-2026-44071FORTIFY_SOURCE disabled
- CVE-2026-44057Dead bounds check in Spotlight RPC unmarshaller
- CVE-2026-7836hextoint macro uppercase bug
- CVE-2026-7835Format string argument mismatch
- CVE-2026-44076Shell injection via volume path
- CVE-2026-44073seteuid failure ignored in auth modules
- CVE-2026-44072system() after failed chdir()
- CVE-2026-44070Unbounded realloc in charset conversion
- CVE-2026-44069Integer underflow in volxlate
- CVE-2026-44068EA path traversal via incomplete sanitization
- CVE-2026-44067EA header parsing heap over-read
- CVE-2026-44066Heap out-of-bounds reads in Spotlight RPC unmarshalling
- CVE-2026-44065Off-by-two in papd lp_write()
- CVE-2026-44064ASP session ID out-of-bounds access
- CVE-2026-44063LDAP filter injection
- CVE-2026-44062Missing o_len bounds check in pull_charset_flags()
- CVE-2026-44061DES-ECB auth with timing side channel
- CVE-2026-44060Integer underflow in dsi_writeinit() leads to denial of service
- CVE-2026-44059Non-reentrant privilege toggle
- CVE-2026-44058Authentication bypass via admin auth user
- CVE-2026-44056Stack buffer overflow in desktop.c
- CVE-2026-44055Bitwise OR logic bug enables shell injection
- CVE-2026-44054Predictable afpd session token
- CVE-2026-44053Weak cryptography in DHCAST128 UAM
- CVE-2026-44052LDAP simple-bind password exposure in log output