CVE-2014-4044: OpenAFS 1.6.8 does not properly clear the… (CVSS 5.0)

Description

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Exploit likelihood

1.59%Up 0.4 points since Feb 4, 2022

Affected products

openafs

Affected packages

Affected packages
Package	Affected	Fixed
`openafs` Debian:12	before 1.6.9-1	1.6.9-1
`openafs` Debian:13	before 1.6.9-1	1.6.9-1
`openafs` Mageia:4 From an advisory covering 3 CVEs	before 1.6.10-1.1.mga4	1.6.10-1.1.mga4

What each source reports

NVD Score used5.0

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Record: CVE-2014-4044
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE ListNo score

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Record: CVE-2014-4044
Updated: 2026-11-02

EUVDEUVD-2014-3975No score

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Record: EUVD-2014-3975
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j7c9-hww5-4m7jNo score

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote...

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Record: GHSA-j7c9-hww5-4m7j
Weakness: CWE-119
Updated: 2026-11-02

OSVNo score

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Record: CVE-2014-4044
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-4044No score

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.

Record: DEBIAN-CVE-2014-4044
Updated: 2026-11-02

OSVMGASA-2014-0515No score

Updated openafs packages fix security vulnerabilies

Updated openafs packages fix security vulnerabilities:

Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument (CVE-2014-0159).

OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet (CVE-2014-2852).

OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests (CVE-2014-4044).

The OpenAFS package has been updated to version 1.6.10, fixing these issues and other bugs, as well as providing support for newer kernel versions.

Record: MGASA-2014-0515
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 16 moreShow less