CVE-2026-44074
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple errors occur. A remote attacker can cause minor service disruption via conditions triggering incorrect error handling.
Risk Assessment
The organization may face minor service disruptions in Netatalk services due to incorrect error handling by a remote attacker.
Recommendation
Upgrade Netatalk to version 4.4.3 or later, which includes corrected error code handling.
Original NVD description (English source)
Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths.