CVE-2026-45698

Description

A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir() function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without proper bounds checking. This can lead to arbitrary code execution or a denial of service.

Statement

Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Mitigation

To mitigate this issue, disable the Netatalk `afpd` service if AFP file sharing is not required.

bash
sudo systemctl stop netatalk
sudo systemctl disable netatalk
Alternatively, restrict network access to the `afpd` service to trusted clients only using firewall rules. Disabling the service will prevent all AFP file sharing functionality. A service restart or reload may be required for changes to take effect.

Understanding the Weakness (CWE)

CWE-120

Integrity,Confidentiality,Availability

Technical Impact: Modify Memory; Execute Unauthorized Code or Commands

Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of the product's implicit security policy. This can often be used to subvert any other security service.

Availability

Technical Impact: Modify Memory; DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU)

Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the product into an infinite loop.

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.