Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing… (CVE-2026-44071)

Netatalk versions 3.1.2 through 4.4.2 lack compilation with FORTIFY_SOURCE, a compiler feature that provides runtime buffer overflow detection. Without this protection, memory errors that would normally trigger safe termination may instead cause a minor denial of service. The vulnerability is remote exploitable but requires high attack complexity and does not impact confidentiality or integrity.

A remote attacker could cause a minor denial of service by triggering memory errors in Netatalk versions compiled without FORTIFY_SOURCE. There is no impact on confidentiality or integrity. The attack complexity is high, and no privileges or user interaction are required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider mitigating exposure by limiting network access to Netatalk services or applying compiler flags to enable FORTIFY_SOURCE in custom builds.