Skip to content
Netatalk vulnerabilities
Newest
-
netatalk
Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()
CVE-2026-45698
Fix available
7.5 High
-
netatalk
Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()
CVE-2026-45699
Fix available
7.5 High
-
netatalk
TOCTOU with root privilege in ad_flush
CVE-2026-7837
Fix available
3.7 Low
-
netatalk
Missing break in DSI OpenSession
CVE-2026-44075
Fix available
3.7 Low
-
netatalk
Bitwise OR of errno values
CVE-2026-44074
Fix available
3.7 Low
-
netatalk
FORTIFY_SOURCE disabled
CVE-2026-44071
Fix available
3.7 Low
-
netatalk
Dead bounds check in Spotlight RPC unmarshaller
CVE-2026-44057
Fix available
3.1 Low
-
netatalk
hextoint macro uppercase bug
CVE-2026-7836
Fix available
3.1 Low
-
netatalk
Format string argument mismatch
CVE-2026-7835
Fix available
3.1 Low
-
netatalk
Shell injection via volume path
CVE-2026-44076
Fix available
6.7 Medium
-
netatalk
seteuid failure ignored in auth modules
CVE-2026-44073
Fix available
4.0 Medium
-
netatalk
system() after failed chdir()
CVE-2026-44072
Fix available
2.5 Low
-
netatalk
Unbounded realloc in charset conversion
CVE-2026-44070
Fix available
3.1 Low
-
netatalk
Integer underflow in volxlate
CVE-2026-44069
Fix available
3.4 Low
-
netatalk
EA path traversal via incomplete sanitization
CVE-2026-44068
Fix available
7.6 High
-
netatalk
EA header parsing heap over-read
CVE-2026-44067
Fix available
3.7 Low
-
netatalk
Heap out-of-bounds reads in Spotlight RPC unmarshalling
CVE-2026-44066
Fix available
7.1 High
-
netatalk
Off-by-two in papd lp_write()
CVE-2026-44065
Fix available
3.7 Low
-
netatalk
ASP session ID out-of-bounds access
CVE-2026-44064
Fix available
7.1 High
-
netatalk
LDAP filter injection
CVE-2026-44063
Fix available
4.2 Medium
-
netatalk
Missing o_len bounds check in pull_charset_flags()
CVE-2026-44062
Fix available
7.5 High
-
netatalk
DES-ECB auth with timing side channel
CVE-2026-44061
Fix available
5.9 Medium
-
netatalk
Integer underflow in dsi_writeinit() leads to denial of service
CVE-2026-44060
Fix available
7.5 High
-
netatalk
Non-reentrant privilege toggle
CVE-2026-44059
Fix available
3.9 Low
-
netatalk
Authentication bypass via admin auth user
CVE-2026-44058
Fix available
6.4 Medium
-
netatalk
Stack buffer overflow in desktop.c
CVE-2026-44056
Fix available
6.0 Medium
-
netatalk
Bitwise OR logic bug enables shell injection
CVE-2026-44055
Fix available
7.5 High
-
netatalk
Predictable afpd session token
CVE-2026-44054
Fix available
6.5 Medium
-
netatalk
Weak cryptography in DHCAST128 UAM
CVE-2026-44053
Fix available
7.4 High
-
netatalk
LDAP simple-bind password exposure in log output
CVE-2026-44052
Fix available
7.5 High
-
netatalk
Arbitrary file read via attacker-controlled symlink creation
CVE-2026-44051
Fix available
8.1 High
-
netatalk
Heap buffer overflow in CNID daemon comm_rcv()
CVE-2026-44050
Fix available
9.9 Critical
-
netatalk
Out-of-bounds write in convert_charset() null termination
CVE-2026-44049
Fix available
7.5 High
-
netatalk
Stack buffer overflow via UCS-2 type confusion in convert_charset()
CVE-2026-44048
Fix available
8.8 High
-
netatalk
SQL injection in MySQL CNID backend
CVE-2026-44047
Fix available
8.8 High
-
netatalk
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...
CVE-2024-38441
Fix available
9.8 Critical
-
netatalk
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...
CVE-2024-38440
Fix available
7.5 High
-
netatalk
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...
CVE-2024-38439
Fix available
9.8 Critical
-
netatalk, debian linux +1 more
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x...
CVE-2023-42464
Fix available
9.8 Critical
-
netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-43634
Fix available
EPSS 19.1%
9.8 Critical
-
netatalk, debian linux, fedoraproject fedora +2 more
Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...
CVE-2022-45188
Fix available
7.8 High
-
netatalk, western digital my cloud, my cloud home +12 more +14 more
Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
CVE-2022-22995
Fix available
10.0 Critical
-
netatalk, debian linux +1 more
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-23125
Fix available
9.8 Critical
-
netatalk, debian linux +1 more
This vulnerability allows remote attackers to disclose sensitive information on affected...
CVE-2022-23124
Fix available
5.3 Medium
-
netatalk, debian linux +1 more
This vulnerability allows remote attackers to disclose sensitive information on affected...
CVE-2022-23123
Fix available
5.3 Medium
-
netatalk, debian linux +1 more
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-23122
Fix available
9.8 Critical
-
netatalk, debian linux +1 more
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-23121
Fix available
9.8 Critical
-
netatalk, debian linux +1 more
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-0194
Fix available
9.8 Critical
-
netatalk, synology diskstation manager, debian linux +2 more
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
CVE-2021-31439
Fix available
8.8 High
-
netatalk, debian linux, synology diskstation manager +3 more +5 more
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to...
CVE-2018-1160
Public exploitFix available
EPSS 86.4%
9.8 Critical
- Show olderLoading…