Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2026-44050

Heap buffer overflow in CNID daemon comm_rcv()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
securin

Description

A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netatalk Netatalk

Default version status: unaffected

  • 2.0.0 to ≤ 4.4.2affected
  • 4.4.3unaffected

References