CVE-2026-44069
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An integer underflow vulnerability exists in the volxlate function of Netatalk versions 3.0.0 through 4.4.2. It allows a local privileged user to obtain limited information, modify limited data, or cause a minor service disruption via crafted volume translation input.
Risk Assessment
The risk for the organization includes potential limited information disclosure, unauthorized data modification, or disruption of the Netatalk service, which may affect file service availability and integrity.
Recommendation
It is recommended to immediately upgrade Netatalk to version 4.4.3 or later, which includes a fix for this vulnerability. Additionally, restrict local system access to trusted users only.
Original NVD description (English source)
An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cause a minor service disruption via crafted volume translation input.