{"id":"CVE-2016-4536","aliases":["DEBIAN-CVE-2016-4536","DLA-493-1","EUVD-2016-5523","GHSA-jv93-j376-qhrw","MGASA-2016-0121","UBUNTU-CVE-2016-4536"],"status":"published","title":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)...","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01306,"percentile":0.70741,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2016-03-25T06:38:37Z","modified":"2026-09-22T07:02:04Z","fixes":[{"ecosystem":"Debian:12","package":"openafs","fixed_in":["1.6.17-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openafs","fixed_in":["1.6.17-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.17-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.17-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-3+deb7u6"}]}],"versions":["1.6.1-3","1.6.1-3+deb7u1","1.6.1-3+deb7u1~bpo60+1","1.6.1-3+deb7u2","1.6.1-3+deb7u2~bpo60+1","1.6.1-3+deb7u3","1.6.1-3+deb7u4","1.6.1-3+deb7u5"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.17-1.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.14-1","1.6.15-1","1.6.15-1ubuntu1","1.6.15-1ubuntu1.1"]}],"products":[{"vendor":"openafs","product":"openafs"}],"references":[{"url":"https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4536"},{"url":"https://github.com/advisories/GHSA-jv93-j376-qhrw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-4536","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0121.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18034","tags":["report"]},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2016-001.txt","tags":["web"]},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt","tags":["web"]},{"url":"http://dl.openafs.org/dl/1.6.16/RELNOTES-1.6.16","tags":["web"]},{"url":"http://dl.openafs.org/dl/1.6.16/RELNOTES-1.6.17","tags":["web"]},{"url":"https://lists.openafs.org/pipermail/openafs-announce/2015/000495.html","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/05/05/23","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-4536","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4536","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-4536","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2016-05-13T16:00:00Z","modified":"2024-08-06T00:32:25.761Z","updated_at":"2026-11-02T14:33:34.815789Z"}],"euvd":[{"id":"EUVD-2016-5523","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2016-05-13T16:00:00Z","modified":"2024-08-06T00:32:25Z","updated_at":"2026-11-03T02:22:46.329763Z"}],"ghsa":[{"id":"GHSA-jv93-j376-qhrw","title":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)...","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2022-05-17T03:54:55Z","modified":"2023-01-28T05:00:44Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:24.37974Z"}],"nvd":[{"id":"CVE-2016-4536","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2016-05-13T16:59:11.92Z","modified":"2026-06-17T00:47:44.193Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:25.366449Z"}],"osv":[{"id":"CVE-2016-4536","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2016-05-13T16:59:11.92Z","modified":"2026-04-16T06:23:57.060465066Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"DEBIAN-CVE-2016-4536","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2016-05-13T16:59:11.92Z","modified":"2026-09-22T07:02:04.70381978Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-4536","description":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.","status":"published","published":"2016-05-13T16:59:00Z","modified":"2026-04-22T10:44:52.188689Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"DLA-493-1","title":"openafs - security update","status":"published","published":"2016-05-29T00:00:00Z","modified":"2026-03-09T02:10:52.31344Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2016-0121","title":"Updated openafs packages fix security vulnerability","description":"In OpenAFS before 1.6.17, users from foreign Kerberos realms can create\ngroups as if they were administrators (CVE-2016-2860).\n\nIn OpenAFS before 1.6.17, information leakage over the network due to\nuninitialized memory (CVE-2016-4536).\n","status":"published","published":"2016-03-25T06:38:37Z","modified":"2026-04-16T06:23:48.832263563Z","updated_at":"2026-11-02T15:49:39.792687Z"}]}}