CVE-2026-44056

Stack buffer overflow in desktop.c

Published May 21, 2026 CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Description
A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited information, or modify limited data.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Netatalk
Netatalk netatalk
Vendors & Products Netatalk
Netatalk netatalk
Type Values Removed Values Added
Description In Netatalk 1.3 through 4.2.2, stack buffer overflow in desktop.c. Fixed in 4.5.0. A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited information, or modify limited data.
Type Values Removed Values Added
Description In Netatalk 1.3 through 4.2.2, stack buffer overflow in desktop.c. Fixed in 4.5.0.
Title Stack buffer overflow in desktop.c
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
securin
Published
Updated
May 21, 2026, 12:28 PM
Reserved
May 5, 2026, 7:24 AM
Status
Deferred
Published
May 21, 2026, 8:16 AM
Modified
Jul 23, 2026, 3:10 PM