CVE Catalog
CVE-2026-44067
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
Netatalk versions 2.1.0 through 4.4.2 contain a heap over-read vulnerability in extended attribute (EA) header parsing. A remote authenticated attacker can use crafted EA data to obtain limited information or cause minor service disruption.
Risk Assessment
The organization may experience memory content leakage or temporary unavailability of the Netatalk service, affecting file sharing.
Recommendation
Update Netatalk to version 4.4.3 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or cause a minor service disruption via crafted EA data.