A vulnerable implementation of the dsi_writeinit() function in Netatalk allows an integer underflow when processing specific input, which can cause the service to crash or become unresponsive. The flaw is an example of an arithmetic underflow (CWE‑191). When exploited, the affected Netatalk instance can be brought down, preventing legitimate clients from accessing file sharing capabilities and potentially impacting availability of any applications that rely on the service. This vulnerability does not grant an attacker additional privileges or compromise can be used to execute a denial‑of‑service attack against the target system. Updated description details are currently unavailable.

Netatalk versions 1.5.0 through 4.4.2 are affected. The problem has been fixed in version 4.4.3 and later. Systems running the listed versions should be upgraded promptly to avoid the denial‑of‑service risk.

The CVSS score of 7.5 indicates a high severity for a denial of service flaw. No EPSS score is available, and the issue is not currently listed in CISA KEV, suggesting it may not yet be widely exploited. The likely attack vector is remote, as Netatalk exposes network services that can be reached from client machines. An attacker who can send crafted input to the vulnerable function could trigger repeated crashes, exhausting system resources and causing availability loss.