Approved changes feed: RSS · Atom

cpe:2.3:a:netatalk:netatalk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetatalk (67a7b4f8-968d-5f05-99bf-12d9f70fff73)
ProductNetatalk (6d97c832-e85b-5a94-9537-356b931fff57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/netatalk purl2cpe 2026-06-01 10:11:44.090909
pkg:deb/ubuntu/netatalk purl2cpe 2026-06-01 10:11:44.090910
pkg:github/netatalk/netatalk purl2cpe 2026-06-01 10:11:44.090912
pkg:rpm/fedora/netatalk purl2cpe 2026-06-01 10:11:44.090914
pkg:rpm/opensuse/netatalk purl2cpe 2026-06-01 10:11:44.090915
pkg:sourceforge/netatalk purl2cpe 2026-06-01 10:11:44.090916

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7837 vulnerable 2026-06-08 08:08:57.721374 TOCTOU with root privilege in ad_flush
LOW (3.7)
A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker to cause limited data modification under specific race conditions.
Published: 2026-05-21T08:14:44.776Z
Updated: 2026-05-21T12:50:33.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7836 vulnerable 2026-06-08 08:08:57.721111 hextoint macro uppercase bug
LOW (3.1)
An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification via crafted hexadecimal input.
Published: 2026-05-21T07:35:13.096Z
Updated: 2026-05-21T12:12:38.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7835 vulnerable 2026-06-08 08:08:57.720782 Format string argument mismatch
LOW (3.1)
A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrect format string processing.
Published: 2026-05-21T07:35:10.895Z
Updated: 2026-05-21T12:14:30.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44076 vulnerable 2026-06-08 08:03:18.080495 Shell injection via volume path
MEDIUM (6.7)
Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.
Published: 2026-05-21T07:35:08.770Z
Updated: 2026-05-22T03:55:55.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44075 vulnerable 2026-06-08 08:03:18.080157 Missing break in DSI OpenSession
LOW (3.7)
A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in unintended session option handling that may allow a remote attacker to cause a minor service disruption via crafted DSI session options.
Published: 2026-05-21T08:14:41.523Z
Updated: 2026-05-21T12:50:52.921Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44074 vulnerable 2026-06-08 08:03:18.079935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44073 vulnerable 2026-06-08 08:03:18.079809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44072 vulnerable 2026-06-08 08:03:18.079612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44071 vulnerable 2026-06-08 08:03:18.079320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44070 vulnerable 2026-06-08 08:03:18.079198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44069 vulnerable 2026-06-08 08:03:18.078878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44068 vulnerable 2026-06-08 08:03:18.078747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44067 vulnerable 2026-06-08 08:03:18.078376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44066 vulnerable 2026-06-08 08:03:18.078255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44065 vulnerable 2026-06-08 08:03:18.078129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44064 vulnerable 2026-06-08 08:03:18.077907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44063 vulnerable 2026-06-08 08:03:18.077786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44062 vulnerable 2026-06-08 08:03:18.077570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44061 vulnerable 2026-06-08 08:03:18.077338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44060 vulnerable 2026-06-08 08:03:18.077118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44059 vulnerable 2026-06-08 08:03:18.076874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44058 vulnerable 2026-06-08 08:03:18.076635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44057 vulnerable 2026-06-08 08:03:18.076511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44056 vulnerable 2026-06-08 08:03:18.076159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44055 vulnerable 2026-06-08 08:03:18.076027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44054 vulnerable 2026-06-08 08:03:18.075797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44053 vulnerable 2026-06-08 08:03:18.075561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44052 vulnerable 2026-06-08 08:03:18.075434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44051 vulnerable 2026-06-08 08:03:18.075062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44050 vulnerable 2026-06-08 08:03:18.074928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44049 vulnerable 2026-06-08 08:03:18.074782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44048 vulnerable 2026-06-08 08:03:18.074433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44047 vulnerable 2026-06-08 08:03:18.074206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38441 vulnerable 2026-06-08 06:41:47.172158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38440 vulnerable 2026-06-08 06:41:47.171577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38439 vulnerable 2026-06-08 06:41:47.168919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42464 vulnerable 2026-06-08 06:11:08.118405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45188 vulnerable 2026-06-08 05:50:35.916383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43634 vulnerable 2026-06-08 05:49:33.647019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23125 vulnerable 2026-06-08 05:40:56.427751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23124 vulnerable 2026-06-08 05:40:56.427197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23123 vulnerable 2026-06-08 05:40:56.426529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23122 vulnerable 2026-06-08 05:40:56.426038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23121 vulnerable 2026-06-08 05:40:56.425533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22995 vulnerable 2026-06-08 05:40:55.952799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0194 vulnerable 2026-06-08 05:39:09.459237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31439 vulnerable 2026-06-08 05:31:53.487376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1160 vulnerable 2026-06-08 05:11:17.070389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5718 vulnerable 2026-06-08 04:50:52.630316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.