NE
Vendor
Netatalk
52
CVEs
0
On KEV
0
New 30D
Products
NE9.9
netatalk
Netatalk
51 CVEs0 on KEV0 new
OS–
Open Source Apple File Share Protocol Suite
Netatalk
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45698 | NE netatalk Netatalk | 7.5 | Aug 17 | Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir() |
| CVE-2026-45699 | NE netatalk Netatalk | 7.5 | Aug 14 | Netatalk has Integer Underflow → Stack Buffer Overflow in copydir() |
| CVE-2026-7837 | NE Netatalk Netatalk | 3.7 | May 21 | TOCTOU with root privilege in ad_flush |
| CVE-2026-44075 | NE Netatalk Netatalk | 3.7 | May 21 | Missing break in DSI OpenSession |
| CVE-2026-44074 | NE Netatalk Netatalk | 3.7 | May 21 | Bitwise OR of errno values |
| CVE-2026-44071 | NE Netatalk Netatalk | 3.7 | May 21 | FORTIFY_SOURCE disabled |
| CVE-2026-44057 | NE Netatalk Netatalk | 3.1 | May 21 | Dead bounds check in Spotlight RPC unmarshaller |
| CVE-2026-7836 | NE Netatalk Netatalk | 3.1 | May 21 | hextoint macro uppercase bug |
| CVE-2026-7835 | NE Netatalk Netatalk | 3.1 | May 21 | Format string argument mismatch |
| CVE-2026-44076 | NE Netatalk Netatalk | 6.7 | May 21 | Shell injection via volume path |
| CVE-2026-44073 | NE Netatalk Netatalk | 5.0 | May 21 | seteuid failure ignored in auth modules |
| CVE-2026-44072 | NE Netatalk Netatalk | 3.0 | May 21 | system() after failed chdir() |
| CVE-2026-44070 | NE Netatalk Netatalk | 3.1 | May 21 | Unbounded realloc in charset conversion |
| CVE-2026-44069 | NE Netatalk Netatalk | 3.9 | May 21 | Integer underflow in volxlate |
| CVE-2026-44068 | NE Netatalk Netatalk | 7.6 | May 21 | EA path traversal via incomplete sanitization |
| CVE-2026-44067 | NE Netatalk Netatalk | 4.2 | May 21 | EA header parsing heap over-read |
| CVE-2026-44066 | NE Netatalk Netatalk | 7.1 | May 21 | Heap out-of-bounds reads in Spotlight RPC unmarshalling |
| CVE-2026-44065 | NE Netatalk Netatalk | 4.2 | May 21 | Off-by-two in papd lp_write() |
| CVE-2026-44064 | NE Netatalk Netatalk | 7.1 | May 21 | ASP session ID out-of-bounds access |
| CVE-2026-44063 | NE Netatalk Netatalk | 4.2 | May 21 | LDAP filter injection |
| CVE-2026-44062 | NE Netatalk Netatalk | 7.5 | May 21 | Missing o_len bounds check in pull_charset_flags() |
| CVE-2026-44061 | NE Netatalk Netatalk | 5.9 | May 21 | DES-ECB auth with timing side channel |
| CVE-2026-44060 | NE Netatalk Netatalk | 7.5 | May 21 | Integer underflow in dsi_writeinit() leads to denial of service |
| CVE-2026-44059 | NE Netatalk Netatalk | 4.5 | May 21 | Non-reentrant privilege toggle |
| CVE-2026-44058 | NE Netatalk Netatalk | 7.2 | May 21 | Authentication bypass via admin auth user |
| CVE-2026-44056 | NE Netatalk Netatalk | 6.4 | May 21 | Stack buffer overflow in desktop.c |
| CVE-2026-44055 | NE Netatalk Netatalk | 7.5 | May 21 | Bitwise OR logic bug enables shell injection |
| CVE-2026-44054 | NE Netatalk Netatalk | 6.5 | May 21 | Predictable afpd session token |
| CVE-2026-44053 | NE Netatalk Netatalk | 7.4 | May 21 | Weak cryptography in DHCAST128 UAM |
| CVE-2026-44052 | NE Netatalk Netatalk | 7.5 | May 21 | LDAP simple-bind password exposure in log output |
| CVE-2026-44051 | NE Netatalk Netatalk | 8.1 | May 21 | Arbitrary file read via attacker-controlled symlink creation |
| CVE-2026-44050 | NE Netatalk Netatalk | 9.9 | May 21 | Heap buffer overflow in CNID daemon comm_rcv() |
| CVE-2026-44049 | NE Netatalk Netatalk | 7.5 | May 21 | Out-of-bounds write in convert_charset() null termination |
| CVE-2026-44048 | NE Netatalk Netatalk | 8.8 | May 21 | Stack buffer overflow via UCS-2 type confusion in convert_charset() |
| CVE-2026-44047 | NE Netatalk Netatalk | 8.8 | May 21 | SQL injection in MySQL CNID backend |
| CVE-2024-38441 | NE Netatalk Netatalk | 9.8 | Jun 16 | Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c |
| CVE-2024-38440 | NE Netatalk Netatalk | 7.5 | Jun 16 | Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in… |
| CVE-2024-38439 | NE Netatalk Netatalk | 9.8 | Jun 16 | Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c |
| CVE-2023-42464 | NE Netatalk Netatalk | 9.8 | Sep 20 | A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17 |
| CVE-2022-43634 | NE Netatalk Netatalk | 9.8 | Mar 29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk |
| CVE-2022-23125 | NE Netatalk Netatalk | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk |
| CVE-2022-23124 | NE Netatalk Netatalk | 9.8 | Mar 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk |
| CVE-2022-23123 | NE Netatalk Netatalk | 9.8 | Mar 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk |
| CVE-2022-23122 | NE Netatalk Netatalk | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk |
| CVE-2022-23121 | NE Netatalk Netatalk | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk |
| CVE-2022-0194 | NE Netatalk Netatalk | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk |
| CVE-2022-45188 | NE Netatalk Netatalk | 7.8 | Nov 12 | Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file |
| CVE-2022-22995 | NE Netatalk Netatalk | 9.8 | Mar 25 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files |
| CVE-2021-31439 | NE Netatalk Netatalk | 8.8 | May 21 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager |
| CVE-2018-1160 | NE Netatalk Netatalk | 9.8 | Dec 20 | Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c |
| CVE-2008-5718 | NE Netatalk Netatalk | – | Dec 26 | The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell… |
| CVE-2004-0974 | OS Open Source Apple File Share Protocol Suite Netatalk | – | Feb 9 | The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files |