PT-2026-42416
CVE-2026-44060
·
Published
2026-05-21
·
Updated
2026-07-20
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Netatalk versions 1.5.0 through 4.4.2
Description
An integer underflow in the
dsi writeinit() function allows a remote unauthenticated attacker to cause a denial of service via a crafted DSI write request.Recommendations
Update to version 4.4.3.
As a temporary workaround, consider restricting access to the
dsi writeinit() function to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾