Vulnerabilidades de Netatalk

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Netatalk: 35 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-44056 Média · 6.4 CWE-121 21/05/2026

Stack buffer overflow in desktop.c

A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited information, or modify limited data.

CVE-2026-44055 Alta · 7.5 CWE-78 21/05/2026

Bitwise OR logic bug enables shell injection

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.

CVE-2026-44054 Média · 6.5 CWE-330 21/05/2026

Predictable afpd session token

Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism.

CVE-2026-44053 Alta · 7.4 CWE-327 21/05/2026

Weak cryptography in DHCAST128 UAM

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack.

CVE-2026-44052 Alta · 7.5 CWE-532 21/05/2026

LDAP simple-bind password exposure in log output

Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials.

CVE-2026-44051 Alta · 8.1 CWE-59 21/05/2026

Arbitrary file read via attacker-controlled symlink creation

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation.

CVE-2026-44050 Crítica · 9.9 CWE-122 21/05/2026

Estouro de buffer na heap no daemon CNID do Netatalk (comm_rcv())

Um estouro de buffer baseado em heap na função comm_rcv() do daemon CNID do Netatalk 2.0.0 até 4.4.2 permite que um atacante remoto autenticado execute código arbitrário com privilégios elevados ou cause negação de serviço.

CVE-2026-44049 Alta · 7.5 CWE-787 21/05/2026

Out-of-bounds write in convert_charset() null termination

An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character data.

CVE-2026-44048 Alta · 8.8 CWE-121 21/05/2026

Stack buffer overflow via UCS-2 type confusion in convert_charset()

A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.

CVE-2026-44047 Alta · 8.8 CWE-89 21/05/2026

SQL injection in MySQL CNID backend

An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data, modify data, or cause a denial of service.