CVE-2026-44071
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Netatalk versions 3.1.2 through 4.4.2 are compiled without FORTIFY_SOURCE, disabling built-in buffer overflow detection. A remote attacker can cause a minor denial of service via memory errors that would otherwise be safely terminated.
Risk Assessment
The organization faces potential service disruptions in Netatalk services caused by a remote attacker, impacting file and print service availability.
Recommendation
Upgrade Netatalk to version 4.4.3 or later. If an upgrade is not possible, consider additional protection mechanisms such as a firewall.
Original NVD description (English source)
Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of service via memory errors that would otherwise be caught and safely terminated by runtime protection.