{"id":"CVE-2016-9772","aliases":["DEBIAN-CVE-2016-9772","DLA-733-1","EUVD-2016-10573","GHSA-qx33-h57r-w5q6","MGASA-2017-0037","UBUNTU-CVE-2016-9772"],"status":"published","title":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via...","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01685,"percentile":0.77137,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2016-12-03T00:00:00Z","modified":"2026-09-22T07:00:48Z","fixes":[{"ecosystem":"Debian:12","package":"openafs","fixed_in":["1.6.20-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openafs","fixed_in":["1.6.20-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"openafs","fixed_in":["1.6.1-3+deb7u7"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"openafs","fixed_in":["1.6.20-1.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.20-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.20-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-3+deb7u7"}]}],"versions":["1.6.1-3","1.6.1-3+deb7u1","1.6.1-3+deb7u1~bpo60+1","1.6.1-3+deb7u2","1.6.1-3+deb7u2~bpo60+1","1.6.1-3+deb7u3","1.6.1-3+deb7u4","1.6.1-3+deb7u5","1.6.1-3+deb7u6"]},{"source":"osv","ecosystem":"Mageia:5","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.20-1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.14-1","1.6.15-1","1.6.15-1ubuntu1","1.6.15-1ubuntu1.1"]}],"products":[{"vendor":"openafs","product":"openafs"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/12/02/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://www.securityfocus.com/bid/94651","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9772"},{"url":"https://github.com/advisories/GHSA-qx33-h57r-w5q6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9772","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0037.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19879","tags":["report"]},{"url":"http://openafs.org/dl/openafs/1.6.18.1/RELNOTES-1.6.18.1","tags":["web"]},{"url":"http://openafs.org/dl/openafs/1.6.18.2/RELNOTES-1.6.18.2","tags":["web"]},{"url":"http://openafs.org/dl/openafs/1.6.18.3/RELNOTES-1.6.18.3","tags":["web"]},{"url":"https://dl.openafs.org/dl/1.6.19/RELNOTES-1.6.19","tags":["web"]},{"url":"https://dl.openafs.org/dl/1.6.20/RELNOTES-1.6.20","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/12/02/9","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-9772","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/01/12","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9772","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-9772","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2017-02-06T17:00:00Z","modified":"2024-08-06T02:59:03.369Z","updated_at":"2026-11-02T14:33:32.103757Z"}],"euvd":[{"id":"EUVD-2016-10573","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2017-02-06T17:00:00Z","modified":"2024-08-06T02:59:03Z","updated_at":"2026-11-03T02:22:26.376959Z"}],"ghsa":[{"id":"GHSA-qx33-h57r-w5q6","title":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via...","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2022-05-17T03:01:05Z","modified":"2023-01-27T05:06:42Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:58.274196Z"}],"nvd":[{"id":"CVE-2016-9772","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2017-02-06T17:59:00.467Z","modified":"2026-06-17T00:56:32.08Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"CVE-2016-9772","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2017-02-06T17:59:00.467Z","modified":"2026-04-16T06:22:22.383017042Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2016-9772","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2017-02-06T17:59:00.467Z","modified":"2026-09-22T07:00:48.505667928Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"UBUNTU-CVE-2016-9772","description":"OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.","status":"published","published":"2017-02-06T17:59:00Z","modified":"2026-04-22T11:05:33.19229Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DLA-733-1","title":"openafs - security update","status":"published","published":"2016-12-03T00:00:00Z","modified":"2026-03-09T02:09:23.288642Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2017-0037","title":"Updated openafs packages fix security vulnerability","description":"Due to incomplete initialization or clearing of reused memory, OpenAFS\ndirectory objects are likely to contain \"dead\" directory entry\ninformation. This extraneous information is not active - that is, it is\nlogically invisible to the fileserver and client. However, the leaked\ninformation is physically visible on the fileserver vice partition, on\nthe wire in FetchData replies and other RPCs, and on the client cache\npartition. This constitutes a leak of directory information\n(CVE-2016-9772).\n\nThe openafs package has been updated to version 1.6.20, to fix this\nissue and other bugs.\n","status":"published","published":"2017-02-02T19:17:14Z","modified":"2026-04-16T06:24:22.690882818Z","updated_at":"2026-11-02T15:49:40.103088Z"}]}}