openafs vulnerabilities (Debian)
36 vulnerabilities.
-
openafsDebian openafs - regression update No score -
openafsDebian Preallocated buffer overflows in XDR responses 7.7 High -
openafsDebian Fileserver crash and possible information leak on StoreACL/FetchACL 6.5 Medium -
openafsDebian Theft of credentials in Unix client PAGs 8.4 High -
openafsDebian OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability... 7.5 High -
openafsDebian OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error... 5.9 Medium -
openafsDebian OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data... 7.5 High -
openafsDebian An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used... 7.5 High -
openafsDebian An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server... 7.5 High -
openafsDebian An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape... 9.8 Critical -
openafsDebian OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote... 7.5 High -
openafsDebian OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via... 5.3 Medium -
openafsDebian Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a... 7.8 High -
openafsDebian The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)... 5.3 Medium -
openafsDebian The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated... 6.5 Medium -
openafsDebian rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not... 5.0 Medium -
openafsDebian rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding... 5.0 Medium -
openafsDebian The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of... 4.0 Medium -
openafsDebian The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing... 2.1 Low -
openafsDebian pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted... 2.1 Low -
openafsDebian OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors. 6.8 Medium -
openafsDebian vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack... 4.3 Medium -
openafsDebian OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote... 5.0 Medium -
openafsDebian OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows... 5.0 Medium -
openafsDebian Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7... 5.0 Medium -
openafsDebian The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables... 4.3 Medium -
openafsDebian OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for... 4.3 Medium -
openafsDebian Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of... 5.0 Medium -
openafsDebian Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated... 6.5 Medium -
openafsDebian The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1... 5.0 Medium -
openafsDebian Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly... 7.5 High -
openafsDebian Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1... 10.0 High -
openafsDebian The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM... 7.8 High -
openafsDebian Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows... 4.3 Medium -
openafsDebian The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid... 7.5 High -
openafsDebian Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc,... 9.8 Critical