| Bug | trixie | forky | sid | Description |
|---|
| CVE-2026-44075 | vulnerable | fixed | fixed | A missing break statement in DSI OpenSession processing in Netatalk 1. ... |
| CVE-2026-44074 | vulnerable | fixed | fixed | Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitw ... |
| CVE-2026-44073 | vulnerable | fixed | fixed | Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check t ... |
| CVE-2026-44072 | vulnerable | fixed | fixed | Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() wit ... |
| CVE-2026-44071 | vulnerable | fixed | fixed | Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which ... |
| CVE-2026-44070 | vulnerable | fixed | fixed | An unbounded memory reallocation in the charset conversion code in Net ... |
| CVE-2026-44069 | vulnerable | fixed | fixed | An integer underflow in the volxlate function in Netatalk 3.0.0 throug ... |
| CVE-2026-44059 | vulnerable | fixed | fixed | A race condition in the privilege toggle mechanism in Netatalk 2.2.5 t ... |
| CVE-2026-7837 | vulnerable | fixed | fixed | A time-of-check time-of-use (TOCTOU) condition in the ad_flush functio ... |
| CVE-2026-7836 | vulnerable | fixed | fixed | An incorrect calculation in the hextoint macro in Netatalk 2.0.0 throu ... |
| CVE-2026-7835 | vulnerable | fixed | fixed | A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allo ... |
| Bug | Description |
|---|
| CVE-2026-45699 | Netatalk is a Free and Open Source file server suite for Unix-like ope ... |
| CVE-2026-45698 | Netatalk is a Free and Open Source file server suite for Unix-like ope ... |
| CVE-2026-45356 | |
| CVE-2026-45355 | |
| CVE-2026-45354 | |
| CVE-2026-44076 | Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4. ... |
| CVE-2026-44068 | Incomplete sanitization of extended attribute (EA) path components in ... |
| CVE-2026-44066 | Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling c ... |
| CVE-2026-44064 | An out-of-bounds read in ASP session ID handling in Netatalk 1.3 throu ... |
| CVE-2026-44062 | A missing output length bounds check in pull_charset_flags() in Netata ... |
| CVE-2026-44060 | An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4. ... |
| CVE-2026-44057 | A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0. ... |
| CVE-2026-44055 | A logic error involving bitwise OR operations in Netatalk 3.1.4 throug ... |
| CVE-2026-44054 | Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from ... |
| CVE-2026-44052 | Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into l ... |
| CVE-2026-44051 | An improper link resolution vulnerability in Netatalk 3.0.2 through 4. ... |
| CVE-2026-44050 | A heap-based buffer overflow in the CNID daemon comm_rcv() function in ... |
| CVE-2026-44049 | An out-of-bounds write due to improper null termination in convert_cha ... |
| CVE-2026-44048 | A stack-based buffer overflow via UCS-2 type confusion in convert_char ... |
| CVE-2026-44047 | An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3 ... |
| CVE-2024-38441 | Netatalk before 3.2.1 has an off-by-one error and resultant heap-based ... |
| CVE-2024-38440 | Netatalk before 3.2.1 has an off-by-one error, and resultant heap-base ... |
| CVE-2024-38439 | Netatalk before 3.2.1 has an off-by-one error and resultant heap-based ... |
| CVE-2023-42464 | A Type Confusion vulnerability was found in the Spotlight RPC function ... |
| CVE-2022-45188 | Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow ... |
| CVE-2022-43634 | This vulnerability allows remote attackers to execute arbitrary code o ... |
| CVE-2022-23125 | This vulnerability allows remote attackers to execute arbitrary code o ... |
| CVE-2022-23124 | This vulnerability allows remote attackers to disclose sensitive infor ... |
| CVE-2022-23123 | This vulnerability allows remote attackers to disclose sensitive infor ... |
| CVE-2022-23122 | This vulnerability allows remote attackers to execute arbitrary code o ... |
| CVE-2022-23121 | This vulnerability allows remote attackers to execute arbitrary code o ... |
| CVE-2022-22995 | The combination of primitives offered by SMB and AFP in their default ... |
| CVE-2022-0194 | This vulnerability allows remote attackers to execute arbitrary code o ... |
| CVE-2021-31439 | This vulnerability allows network-adjacent attackers to execute arbitr ... |
| CVE-2018-1160 | Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_ ... |
| CVE-2008-5718 | The papd daemon in Netatalk before 2.0.4-beta2, when using certain var ... |
| CVE-2004-0974 | The netatalk package in Trustix Secure Linux 1.5 through 2.1, and poss ... |