CVE-2014-4044
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote...
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
Exploit likelihood
What each source reports
NVD Score used
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
- Record
CVE-2014-4044- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
- Record
CVE-2014-4044- Updated
- 2026-11-02
EUVDEUVD-2014-3975 No score
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
- Record
EUVD-2014-3975- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j7c9-hww5-4m7j No score
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote...
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
- Record
GHSA-j7c9-hww5-4m7j- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
- Record
CVE-2014-4044- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-4044 No score
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
- Record
DEBIAN-CVE-2014-4044- Updated
- 2026-11-02
OSVMGASA-2014-0515 No score
Updated openafs packages fix security vulnerabilies
Updated openafs packages fix security vulnerabilities:
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument (CVE-2014-0159).
OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet (CVE-2014-2852).
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests (CVE-2014-4044).
The OpenAFS package has been updated to version 1.6.10, fixing these issues and other bugs, as well as providing support for newer kernel versions.
- Record
MGASA-2014-0515- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4044 is a medium vulnerability (CVSS 5.0) in Openafs, published June 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. Fixed in openafs 1.6.9-1.
References
gerrit.openafs.org
openwall.com/lists/oss-security/2014/06/13/3
securityfocus.com/bid/68003
nvd.nist.gov/vuln/detail/CVE-2014-4044
github.com/advisories/GHSA-j7c9-hww5-4m7j
Show 16 moreShow less
security-tracker.debian.org/tracker/CVE-2014-4044
advisories.mageia.org/MGASA-2014-0515.html
bugs.mageia.org/show_bug.cgi?id=13188
openafs.org/security/OPENAFS-SA-2014-001.txt
lists.openafs.org/pipermail/openafs-announce/2014/000455.html
debian.org/security/2014/dsa-2899