An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character data.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8395-1 advisory.

    Arjun Basnet discovered that Netatalk incorrectly sanitized user input in its MySQL CNID backend. A remote     authenticated attacker could possibly use this issue to conduct SQL injection attacks. (CVE-2026-44047)

    Arjun Basnet discovered that Netatalk incorrectly handled UCS-2 character set conversion. A remote     authenticated attacker could possibly use this issue to cause a denial of service or execute arbitrary     code. (CVE-2026-44048)

    Arjun Basnet discovered that Netatalk improperly handled null termination during character set conversion.
    A remote authenticated attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. (CVE-2026-44049)

    Arjun Basnet discovered that the Netatalk CNID daemon improperly handled request-supplied name lengths. A     local attacker could possibly use this issue to cause a denial of service or execute arbitrary code with     escalated privileges. (CVE-2026-44050)

    Arjun Basnet discovered that Netatalk improperly resolved symbolic links. A remote authenticated attacker     could possibly use this issue to read or overwrite arbitrary files on the system. (CVE-2026-44051)

    Arjun Basnet discovered that Netatalk incorrectly handled logging when performing LDAP simple-bind     operations. A local attacker could possibly use this issue to obtain sensitive information.
    (CVE-2026-44052)

    Arjun Basnet discovered that Netatalk contained an operator precedence logic error when processing input.
    A remote authenticated attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. (CVE-2026-44055)

    Arjun Basnet discovered that Netatalk incorrectly handled DSI write requests. A remote unauthenticated     attacker could possibly use this issue to cause a denial of service. (CVE-2026-44060)

    Arjun Basnet discovered that Netatalk incorrectly validated output lengths when converting character sets.
    A remote authenticated attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. (CVE-2026-44062)

    Arjun Basnet discovered that Netatalk incorrectly handled length validation when parsing certain session     identifiers. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-44064)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e7e7bb2417 advisory.

    4.4.3 Release

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9fd50b2ff1 advisory.

    4.4.3 Release

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-62801 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6280-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 18, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : netatalk     CVE ID         : CVE-2026-44047 CVE-2026-44048 CVE-2026-44049 CVE-2026-44050                      CVE-2026-44051 CVE-2026-44052 CVE-2026-44054 CVE-2026-44055                      CVE-2026-44057 CVE-2026-44060 CVE-2026-44062 CVE-2026-44064                      CVE-2026-44066 CVE-2026-44068 CVE-2026-44076 CVE-2026-45354                      CVE-2026-45355 CVE-2026-45356 CVE-2026-45698 CVE-2026-45699

    Multiple security vulnerabilities were found in Netatalk, an     implementation of the Apple Filing Protocol (AFP), which could result in     denial of service, information disclosure or the execution of arbitrary     code.

    For the stable distribution (trixie), these problems have been fixed in     version 4.2.3~ds-1+deb13u2.

    We recommend that you upgrade your netatalk packages.

    For the detailed security status of netatalk please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/netatalk

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through     4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via     crafted character data. (CVE-2026-44049)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
320405	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Netatalk vulnerabilities (USN-8395-1)	Nessus	Ubuntu Local Security Checks	critical
318061	Fedora 44 : netatalk (2026-e7e7bb2417)	Nessus	Fedora Local Security Checks	critical
318059	Fedora 43 : netatalk (2026-9fd50b2ff1)	Nessus	Fedora Local Security Checks	critical
315215	Debian dsa-62801 : a2boot - security update	Nessus	Debian Local Security Checks	critical
314822	Linux Distros Unpatched Vulnerability : CVE-2026-44049	Nessus	Misc.	high

Detections

Analytics

CVE-2026-44049

high

Tenable Plugins

critical

critical

critical

critical

high