CVE Catalog
CVE-2026-44048
HighSummary
Netatalk versions 2.0.4 through 4.4.2 have a stack-based buffer overflow due to UCS-2 type confusion in the convert_charset() function. This allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.
Risk Assessment
The organization may be exposed to remote attacks that could lead to unauthorized code execution or service disruption.
Recommendation
It is recommended to update Netatalk to the latest version to mitigate this vulnerability and to monitor systems for potential attack attempts.
Original NVD description (English source)
A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.