CVE Catalog

CVE-2026-44065

MediumCVSS 4.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

3th percentile - higher than 3% of all known CVEs

Summary

An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data.

Risk Assessment

An attacker on the same local network can disrupt printing services or modify print data, potentially leading to incorrect prints or service crashes.

Recommendation

Update Netatalk to version 4.4.3 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS