CVE-2026-44070

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-44070
An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted character conversion requests.

3.1 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://netatalk.io/security/CVE-2026-44070
Configurations

No configuration.

History

23 Jul 2026, 16:10

Type Values Removed Values Added
Summary
  • (es) Una reasignación de memoria ilimitada en el código de conversión de conjuntos de caracteres en Netatalk 2.0.0 hasta 4.4.2 permite a un atacante remoto autenticado causar una denegación de servicio menor mediante solicitudes de conversión de caracteres manipuladas.

21 May 2026, 09:16

Type Values Removed Values Added
Summary (en) In Netatalk 2.0.0 through 4.4.2, unbounded realloc in charset conversion. Fixed in 4.5.0. (en) An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted character conversion requests.

21 May 2026, 08:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-21 08:16

Updated : 2026-07-23 16:10

NVD link : CVE-2026-44070

Mitre link : CVE-2026-44070

CVE.ORG link : CVE-2026-44070

JSON object : View

Products Affected

No product.

CWE
CWE-770

Allocation of Resources Without Limits or Throttling