CVE-2026-45698
Description
A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir() function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without proper bounds checking. This can lead to arbitrary code execution or a denial of service.
Statement
This vulnerability is rated as Important because an authenticated remote attacker could execute arbitrary code or crash the service on affected systems. Netatalk is not distributed in Red Hat Enterprise Linux core repositories and is only available through community channels such as Fedora and Extra Packages for Enterprise Linux (EPEL). Exploitation requires valid authentication and specific file manipulation operations that cross filesystem boundaries within an active Apple Filing Protocol (AFP) share, limiting exposure under standard single-mount storage configurations.
Mitigation
To mitigate this issue, disable the Netatalk `afpd` service if AFP file sharing is not required.
bashAlternatively, restrict network access to the `afpd` service to trusted clients only using firewall rules. Disabling the service will prevent all AFP file sharing functionality. A service restart or reload may be required for changes to take effect.
sudo systemctl stop netatalk
sudo systemctl disable netatalk
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
