Out-of-Bounds Read Vulnerability in Netatalk Affects Multiple Versions
CVE-2026-44064

7.1HIGH

Key Information:

Vendor

Netatalk

Status
Netatalk
Vendor
CVE Published:
21 May 2026

What is CVE-2026-44064?

An out-of-bounds read vulnerability exists in the handling of ASP session IDs in Netatalk versions 1.3 through 4.4.2. This issue enables an adjacent network attacker to exploit the flaw by sending a crafted ASP request. If successfully executed, this can lead to limited information disclosure or a potential denial of service, compromising the integrity and availability of the affected system.

Affected Version(s)

Netatalk 1.3 <= 4.4.2

Netatalk 4.4.3

References

https://netatalk.io/security/CVE-2026-44064
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arjun Basnet from Securin
.