CVE-2026-44071: FORTIFY_SOURCE disabled
Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFYSOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of service via memory errors that would otherwise be caught and safely terminated by runtime protection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44071?
The severity of CVE-2026-44071 is classified as low, with a score of 3.7.
What is CVE-2026-44071 about?
CVE-2026-44071 indicates that Netatalk versions 3.1.2 through 4.4.2 are compiled without FORTIFY_SOURCE, which disables runtime buffer overflow detection.
How do I fix CVE-2026-44071?
To fix CVE-2026-44071, ensure that Netatalk is compiled with FORTIFY_SOURCE enabled in your build configuration.
What impact does CVE-2026-44071 have on systems?
CVE-2026-44071 may allow a remote attacker to cause minor denial of service through memory errors that would not be caught due to the lack of runtime protection.
Which versions of Netatalk are affected by CVE-2026-44071?
CVE-2026-44071 affects Netatalk versions from 3.1.2 to 4.4.2.