CVE-2016-4536
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)...
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
CVE-2016-4536- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
CVE-2016-4536- Updated
- 2026-11-02
EUVDEUVD-2016-5523 No score
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
EUVD-2016-5523- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv93-j376-qhrw
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)...
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
GHSA-jv93-j376-qhrw- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
CVE-2016-4536- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-4536
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
DEBIAN-CVE-2016-4536- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-4536
The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.
- Record
UBUNTU-CVE-2016-4536- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2016-0121 No score
Updated openafs packages fix security vulnerability
In OpenAFS before 1.6.17, users from foreign Kerberos realms can create groups as if they were administrators (CVE-2016-2860).
In OpenAFS before 1.6.17, information leakage over the network due to uninitialized memory (CVE-2016-4536).
- Record
MGASA-2016-0121- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openafsDebian:12 |
before 1.6.17-1 | 1.6.17-1 |
openafsDebian:13 |
before 1.6.17-1 | 1.6.17-1 |
openafsDebian:7 |
before 1.6.1-3+deb7u6, plus listed versions 1.6.1-31.6.1-3+deb7u11.6.1-3+deb7u1~bpo60+11.6.1-3+deb7u21.6.1-3+deb7u2~bpo60+11.6.1-3+deb7u31.6.1-3+deb7u41.6.1-3+deb7u5 |
1.6.1-3+deb7u6 |
openafsMageia:5 |
before 1.6.17-1.mga5 | 1.6.17-1.mga5 |
openafsUbuntu:16.04:LTS |
All versions, plus listed versions 1.6.14-11.6.15-11.6.15-1ubuntu11.6.15-1ubuntu1.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-4536 is a medium vulnerability (CVSS 5.3) in Openafs, published March 25, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. Fixed in openafs 1.6.17-1.
References
openafs.org/pages/security/OPENAFS-SA-2016-002.txt
lists.openafs.org/pipermail/openafs-announce/2016/000496.html
nvd.nist.gov/vuln/detail/CVE-2016-4536
github.com/advisories/GHSA-jv93-j376-qhrw
security-tracker.debian.org/tracker/CVE-2016-4536
Show 9 moreShow less
advisories.mageia.org/MGASA-2016-0121.html
bugs.mageia.org/show_bug.cgi?id=18034
dl.openafs.org/dl/1.6.16/RELNOTES-1.6.16
openwall.com/lists/oss-security/2016/05/05/23
ubuntu.com/security/CVE-2016-4536
cve.org/CVERecord?id=CVE-2016-4536