CVE-2026-44074

Summary

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths.

Affected Software

VendorProductVersion RangeStatus
NetatalkNetatalk2.1.0 <= 4.4.2affected
NetatalkNetatalk4.5.0unaffected

Weaknesses

  • CWE-682: Incorrect Calculation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References