Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-44067

EA header parsing heap over-read

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
securin

Description

A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or cause a minor service disruption via crafted EA data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netatalk Netatalk

Default version status: unaffected

  • 2.1.0 to ≤ 4.4.2affected
  • 4.5.0unaffected

References