CVE-2026-44070
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted character conversion requests.
Risk Assessment
The organization may experience minor service disruptions in Netatalk services caused by an authenticated remote attacker who can overload the system with character conversion requests.
Recommendation
Upgrade Netatalk to version 4.4.3 or later, which includes memory reallocation limits. Also monitor and restrict authenticated user access.
Original NVD description (English source)
An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted character conversion requests.