CVE catalog

CVE-2026-45698

DEBIAN-CVE-2026-45698

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Aug 17, 2026, 6:21:19 PM UTC
Updated: Oct 1, 2026, 3:03:14 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.45% · Oct 25, 2026

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir() function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path construction. deletedir() is a utility function called when a file operation crosses a device boundary inside an AFP shared volume, which the standard library's renameat() cannot handle. The function attempts to prevent buffer overflows by tracking available space in a size_t remain variable. However, the arithmetic used to compute remain results in an unsigned integer underflow, causing the variable to become SIZE_MAX. Because of this, the subsequent boundary check always evaluates as safe, allowing an unbounded strcpy() operation to copy attacker-controlled filenames into a nearly full stack buffer. Version 4.4.3 patches the issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	netatalk	13	`4.2.3~ds-1`	vulnerable
Debian	netatalk	13	`4.2.3~ds-1+deb13u1`	vulnerable
Debian	netatalk	13	`4.2.3~ds-1+deb13u2`	fixed
Debian	netatalk	14	`4.2.3~ds-1`	vulnerable
Debian	netatalk	14	`4.2.3~ds-2`	vulnerable
Debian	netatalk	14	`4.2.3~ds-2.1`	vulnerable
Debian	netatalk	14	`4.4.1~ds-1`	vulnerable
Debian	netatalk	14	`4.4.2~ds-1`	vulnerable
Debian	netatalk	14	`4.4.3~ds-1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	netatalk	deb	13	`4.2.3~ds-1+deb13u2`	Not reported	DEBIAN-CVE-2026-45698	Not reported
Debian	netatalk	deb	14	`4.4.3~ds-1`	Not reported	DEBIAN-CVE-2026-45698	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[a2boot]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[atalkd]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[libatalk]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[libatalk-dev]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[macipgw]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[netatalk]Fixed
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[netatalk-doc]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · all · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · all · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · all · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · all · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[netatalk-tests]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[netatalk-tools]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[papd]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
[timelord]Fixed
Source package: [netatalk]
Details (4)
- 4.2.3~ds-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13
- 4.2.3~ds-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 4.2.3~ds-1+deb13u2
  pypi · netatalk · debian · 13

Observed: Oct 27, 2026, 7:05:02 AM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]