An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a… (CVE-2026-44065)

CVE-2026-44065 describes an off-by-two error in the lp_write() function within the papd daemon of Netatalk versions 2.0.0 through 4.4.2. This flaw enables an attacker on the same network segment to manipulate limited data or cause minor service disruption by crafting specific print data packets. The vulnerability is rated medium severity with a CVSS 3.1 score of 4.2, reflecting low impact on confidentiality, limited impact on integrity, and low impact on availability. The affected versions include multiple Ubuntu-specific builds of Netatalk 2.2.2, 2.2.5, and 2.2.6 packages. No information about patches or vendor advisories is provided, so remediation status is unknown.

An adjacent network attacker can exploit this off-by-two error to modify limited data or cause minor service disruption. The impact on confidentiality is none, integrity impact is low, and availability impact is low, indicating limited but non-negligible risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is confirmed, limit exposure by restricting access to the papd service to trusted network segments only.