Stack-based Buffer Overflow in Netatalk Affects Multiple Versions
CVE-2026-44056

6MEDIUM

Key Information:

Vendor

Netatalk

Status
Netatalk
Vendor
CVE Published:
21 May 2026

What is CVE-2026-44056?

A stack-based buffer overflow vulnerability has been identified in Netatalk versions 1.3 through 4.2.2, specifically within the desktop.c file. This flaw allows an authenticated remote attacker to exploit the software, which may lead to a denial of service, the retrieval of limited information, or unauthorized modification of certain data. Users and administrators of affected versions should review security protocols and apply patches to safeguard their systems against potential exploitation.

Affected Version(s)

Netatalk 1.3 <= 4.2.2

Netatalk 4.5.0

References

https://netatalk.io/security/CVE-2026-44056
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arjun Basnet from Securin
.