CVE-2026-44057: Dead bounds check in Spotlight RPC unmarshaller
A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/netatalkto a version that resolves this vulnerability.Fixed in 4.4.3-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44057?
The severity of CVE-2026-44057 is classified as low with a score of 3.1.
How do I fix CVE-2026-44057?
The recommended fix for CVE-2026-44057 is to update Netatalk to a version that addresses the vulnerability.
What type of vulnerability is CVE-2026-44057?
CVE-2026-44057 is a dead bounds check vulnerability in the Spotlight RPC unmarshaller.
What impact does CVE-2026-44057 have?
CVE-2026-44057 may allow a remote authenticated attacker to obtain limited information through crafted Spotlight RPC requests.
Which versions of Netatalk are affected by CVE-2026-44057?
Netatalk versions from 3.0.0 through 4.4.2 are affected by CVE-2026-44057.