Skip to contentNetatalk Netatalk vulnerabilities
- netatalkNetatalk has Integer Underflow → Stack Buffer Overflow in deletedir()CVE-2026-45698Fix available7.5 High
- netatalkNetatalk has Integer Underflow → Stack Buffer Overflow in copydir()CVE-2026-45699Fix available7.5 High
- netatalkTOCTOU with root privilege in ad_flushCVE-2026-7837Fix available3.7 Low
- netatalkMissing break in DSI OpenSessionCVE-2026-44075Fix available3.7 Low
- netatalkBitwise OR of errno valuesCVE-2026-44074Fix available3.7 Low
- netatalkFORTIFY_SOURCE disabledCVE-2026-44071Fix available3.7 Low
- netatalkDead bounds check in Spotlight RPC unmarshallerCVE-2026-44057Fix available3.1 Low
- netatalkhextoint macro uppercase bugCVE-2026-7836Fix available3.1 Low
- netatalkFormat string argument mismatchCVE-2026-7835Fix available3.1 Low
- netatalkShell injection via volume pathCVE-2026-44076Fix available6.7 Medium
- netatalkseteuid failure ignored in auth modulesCVE-2026-44073Fix available4.0 Medium
- netatalksystem() after failed chdir()CVE-2026-44072Fix available2.5 Low
- netatalkUnbounded realloc in charset conversionCVE-2026-44070Fix available3.1 Low
- netatalkInteger underflow in volxlateCVE-2026-44069Fix available3.4 Low
- netatalkEA path traversal via incomplete sanitizationCVE-2026-44068Fix available7.6 High
- netatalkEA header parsing heap over-readCVE-2026-44067Fix available3.7 Low
- netatalkHeap out-of-bounds reads in Spotlight RPC unmarshallingCVE-2026-44066Fix available7.1 High
- netatalkOff-by-two in papd lp_write()CVE-2026-44065Fix available3.7 Low
- netatalkASP session ID out-of-bounds accessCVE-2026-44064Fix available7.1 High
- netatalkLDAP filter injectionCVE-2026-44063Fix available4.2 Medium
- netatalkMissing o_len bounds check in pull_charset_flags()CVE-2026-44062Fix available7.5 High
- netatalkDES-ECB auth with timing side channelCVE-2026-44061Fix available5.9 Medium
- netatalkInteger underflow in dsi_writeinit() leads to denial of serviceCVE-2026-44060Fix available7.5 High
- netatalkNon-reentrant privilege toggleCVE-2026-44059Fix available3.9 Low
- netatalkAuthentication bypass via admin auth userCVE-2026-44058Fix available6.4 Medium
- netatalkStack buffer overflow in desktop.cCVE-2026-44056Fix available6.0 Medium
- netatalkBitwise OR logic bug enables shell injectionCVE-2026-44055Fix available7.5 High
- netatalkPredictable afpd session tokenCVE-2026-44054Fix available6.5 Medium
- netatalkWeak cryptography in DHCAST128 UAMCVE-2026-44053Fix available7.4 High
- netatalkLDAP simple-bind password exposure in log outputCVE-2026-44052Fix available7.5 High
- netatalkArbitrary file read via attacker-controlled symlink creationCVE-2026-44051Fix available8.1 High
- netatalkHeap buffer overflow in CNID daemon comm_rcv()CVE-2026-44050Fix available9.9 Critical
- netatalkOut-of-bounds write in convert_charset() null terminationCVE-2026-44049Fix available7.5 High
- netatalkStack buffer overflow via UCS-2 type confusion in convert_charset()CVE-2026-44048Fix available8.8 High
- netatalkSQL injection in MySQL CNID backendCVE-2026-44047Fix available8.8 High
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...CVE-2024-38441Fix available9.8 Critical
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...CVE-2024-38440Fix available7.5 High
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...CVE-2024-38439Fix available9.8 Critical
- netatalk, debian linux +1 moreA Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x...CVE-2023-42464Fix available9.8 Critical
- netatalkThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-43634Fix availableEPSS 19.1%9.8 Critical
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...CVE-2022-45188Fix available7.8 High
- netatalk, western digital my cloud, my cloud home +12 more +14 moreWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in NetatalkCVE-2022-22995Fix available10.0 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-23125Fix available9.8 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2022-23124Fix available5.3 Medium
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2022-23123Fix available5.3 Medium
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-23122Fix available9.8 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-23121Fix available9.8 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-0194Fix available9.8 Critical
- netatalk, synology diskstation manager, debian linux +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...CVE-2021-31439Fix available8.8 High
- netatalk, debian linux, synology diskstation manager +3 more +5 moreNetatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to...CVE-2018-1160Public exploitFix availableEPSS 86.4%9.8 Critical
- Show olderLoading…