CVE-2026-44050: Heap buffer overflow in CNID daemon comm_rcv()
A heap-based buffer overflow in the CNID daemon commrcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/netatalkto a version that resolves this vulnerability.Fixed in 4.4.3-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44050?
CVE-2026-44050 has a critical severity score of 9.9.
How do I fix CVE-2026-44050?
To mitigate CVE-2026-44050, update Netatalk to version 4.4.3 or later, which includes the necessary patches.
What type of attack is enabled by CVE-2026-44050?
CVE-2026-44050 allows remote authenticated attackers to execute arbitrary code or cause a denial of service.
Which versions of Netatalk are affected by CVE-2026-44050?
Netatalk versions 2.0.0 through 4.4.2 are affected by CVE-2026-44050.
What kind of vulnerability is CVE-2026-44050 classified as?
CVE-2026-44050 is classified as a heap buffer overflow vulnerability.