CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3285 – Debian Security Advisory 3320-1
https://notcve.org/view.php?id=CVE-2015-3285
03 Aug 2015 — The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command. Vulnerabilidad en el pioctl para el comando OSD FS en OpenAFS en versiones anteriores a 1.6.13, usa el puntero incorrecto cuando escribe los resultados del RPC, lo que permite a usuarios locales causar una denegación de servicio (corrupción de memoria y kernel panic) a tr... • http://www.debian.org/security/2015/dsa-3320 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2014-2852
https://notcve.org/view.php?id=CVE-2014-2852
14 Apr 2014 — OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet. OpenAFS anterior a 1.6.7 retrasa el hilo de escucha cuando falla un RXS_CheckResponse, lo que permite a atacantes remotos causar una denegación de servicio (degradación de rendimiento) a través de un paquete invalido. • http://www.debian.org/security/2014/dsa-2899 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 81EXPL: 0CVE-2013-4134 – Mandriva Linux Security Advisory 2014-244
https://notcve.org/view.php?id=CVE-2013-4134
29 Jul 2013 — OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. OpenAFS anterior a 1.4.15, 1.6.x anterior a 1.6.5 y 1.7.x anterior a 1.7.26 utiliza cifrado débil (DES) para las claves de Kerberos, lo que hace que sea más fácil para los atacantes remotos para obtener la clave de servicio. Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to... • http://www.debian.org/security/2013/dsa-2729 • CWE-310: Cryptographic Issues •
CVSS: 8.8EPSS: 2%CPEs: 61EXPL: 0CVE-2013-1794 – Mandriva Linux Security Advisory 2014-244
https://notcve.org/view.php?id=CVE-2013-1794
12 Mar 2013 — Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry. Desbordamiento de búfer en ciertas utilidades de cliente OpenAFS antes de v1.6.2 que permite a usuarios remotos autenticados provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un servidor de ficheros larga entrada ACL. Buffer overflow in certain client util... • http://secunia.com/advisories/52342 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 2%CPEs: 61EXPL: 0CVE-2013-1795 – Mandriva Linux Security Advisory 2014-244
https://notcve.org/view.php?id=CVE-2013-1795
12 Mar 2013 — Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow. Desbordamiento de entero en ptserver en OpenAFS anterior a v1.6.2 que permite a atacantes remotos causar una denegación del servicio (rotura) a través de una lista larga desde el UdToName RPC, que dispara un desbordamiento de bufer basado en pila. Buffer overflow in certain client utilities in OpenAFS before 1.6... • http://secunia.com/advisories/52342 • CWE-189: Numeric Errors •
CVSS: 9.8EPSS: 2%CPEs: 3EXPL: 0CVE-2011-0430 – Gentoo Linux Security Advisory 201404-05
https://notcve.org/view.php?id=CVE-2011-0430
18 Feb 2011 — Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors. Doble vulnerabilidad en el proceso del Rx Server en OpenAFS v1.4.14, v1.4.12, v1.4.7 y posiblemente otras versiones permite a atacantes remotos provocar una denegación de servicio y ejecutar código arbitrario a través de vectores desconocidos. Multiple vulnerabilities have been found in OpenAFS, w... • http://secunia.com/advisories/43371 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2011-0431 – Gentoo Linux Security Advisory 201404-05
https://notcve.org/view.php?id=CVE-2011-0431
18 Feb 2011 — The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third party information. La función afs_linux_lock en afs/Linux/osi_vnodeops.c en el módulo del kernel en OpenAFS v1.4.14, v1.4.12, v1.4.7, y posiblemente otras versiones no controla correctamente los errores, que permite... • http://secunia.com/advisories/43371 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 5%CPEs: 79EXPL: 1CVE-2009-1250 – Gentoo Linux Security Advisory 201404-05
https://notcve.org/view.php?id=CVE-2009-1250
09 Apr 2009 — The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. El gestor de caché en el cliente OpenAFS v1.0 hasta v1.4.8 y v1.5.0 hasta v1.5.58 en Linux, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a ... • http://secunia.com/advisories/34655 • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 12%CPEs: 72EXPL: 0CVE-2009-1251 – Gentoo Linux Security Advisory 201404-05
https://notcve.org/view.php?id=CVE-2009-1251
09 Apr 2009 — Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. Desbordamiento de búfer basado en montículo en el gestor de caché en el cliente OpenAFS v1.0 hasta la v1.4.8 y v1.5.0 hasta la 1.5.58 de las plataformas Unix, permite a atacant... • http://secunia.com/advisories/34655 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.9EPSS: 1%CPEs: 4EXPL: 0CVE-2007-6599
https://notcve.org/view.php?id=CVE-2007-6599
04 Jan 2008 — Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock. Condición de carrera en el servidor de ficheros de OpenAFS 1.3.50 hasta 1.4.5 y 1.5.0 hasta 1.5.27 permite a atacantes remotos provocar una denegación de servicio (caída de demoni... • http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •