Openafs vulnerabilities

Products

• Openafs 36

Newest

• openafs Preallocated buffer overflows in XDR responses CVE-2024-10397 Fix available 7.7 HighNovember 14, 2024
• openafs Fileserver crash and possible information leak on StoreACL/FetchACL CVE-2024-10396 Fix available 6.5 MediumNovember 14, 2024
• openafs Theft of credentials in Unix client PAGs CVE-2024-10394 Fix available 8.4 HighNovember 14, 2024
• openafs, debian linux +1 more OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability... CVE-2019-18602 Fix available 7.5 HighOctober 29, 2019
• openafs, debian linux +1 more OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error... CVE-2019-18603 Fix available 5.9 MediumOctober 29, 2019
• openafs OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data... CVE-2019-18601 Fix available 7.5 HighOctober 29, 2019
• openafs, debian linux +1 more An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used... CVE-2018-16949 Fix available 7.5 HighSeptember 12, 2018
• openafs, debian linux +1 more An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server... CVE-2018-16948 Fix available 7.5 HighSeptember 12, 2018
• openafs, debian linux +1 more An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape... CVE-2018-16947 Fix available 9.8 CriticalSeptember 12, 2018
• openafs, debian linux +1 more OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote... CVE-2017-17432 Fix available 7.5 HighDecember 6, 2017
• openafs OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via... CVE-2016-9772 Fix available 5.3 MediumDecember 3, 2016
• openafs, debian linux +1 more Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a... CVE-2015-8312 Fix available 7.8 HighMay 5, 2016
• openafs The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)... CVE-2016-4536 Fix available 5.3 MediumMarch 25, 2016
• openafs, debian linux +1 more The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated... CVE-2016-2860 Fix available 6.5 MediumMarch 25, 2016
• openafs rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not... CVE-2015-7763 Fix available 5.0 MediumNovember 1, 2015
• openafs, debian linux +1 more rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding... CVE-2015-7762 Fix available 5.0 MediumNovember 1, 2015
• openafs Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to... CVE-2015-3286 4.6 MediumAugust 12, 2015
• openafs, debian linux +1 more The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of... CVE-2015-6587 Fix available 4.0 MediumJuly 30, 2015
• openafs The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing... CVE-2015-3285 Fix available 2.1 LowJuly 30, 2015
• openafs pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted... CVE-2015-3284 Fix available 2.1 LowJuly 30, 2015
• openafs OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors. CVE-2015-3283 Fix available 6.8 MediumJuly 30, 2015
• openafs vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack... CVE-2015-3282 Fix available 4.3 MediumJuly 30, 2015
• openafs OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote... CVE-2014-4044 Fix available 5.0 MediumJune 17, 2014
• openafs OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows... CVE-2014-2852 Fix available 5.0 MediumApril 9, 2014
• openafs, debian linux +1 more Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7... CVE-2014-0159 Fix available 5.0 MediumApril 9, 2014
• openafs, debian linux +1 more The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables... CVE-2013-4135 Fix available 4.3 MediumJuly 28, 2013
• openafs, debian linux +1 more OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for... CVE-2013-4134 Fix available 4.3 MediumJuly 28, 2013
• openafs Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of... CVE-2013-1795 Fix available 5.0 MediumMarch 4, 2013
• openafs Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated... CVE-2013-1794 Fix available 6.5 MediumMarch 4, 2013
• openafs The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1... CVE-2011-0431 Fix available 5.0 MediumFebruary 16, 2011
• openafs Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly... CVE-2011-0430 Fix available 7.5 HighFebruary 16, 2011
• openafs, unix +1 more Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1... CVE-2009-1251 Fix available 10.0 HighApril 9, 2009
• ibm afs, openafs +1 more The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM... CVE-2009-1250 Fix available 7.8 HighApril 9, 2009
• openafs, debian linux +1 more Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows... CVE-2007-6599 Fix available 4.3 MediumJanuary 4, 2008
• openafs The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid... CVE-2007-1507 Fix available 7.5 HighMarch 20, 2007
• gnu glibc, cray unicos, freebsd +10 more +12 more Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ... CVE-2003-0028 Fix available EPSS 15.0% 7.5 HighMarch 21, 2003