CVE-2026-44065

MEDIUM

Netatalk papd lp_write() - Adjacent Data Modification and Service Disruption

Title source: manual

Description

An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

Netatalk Security Advisory CVE-2026-44065

https://netatalk.io/security/CVE-2026-44065

Scores

CVSS v3 4.2

EPSS 0.0013

EPSS Percentile 2.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-193

Status published

Products (2)

Netatalk/Netatalk 2.0.0 - 4.4.2

Netatalk/Netatalk 4.5.0

Published May 21, 2026

Tracked Since May 21, 2026