CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3282 – Debian Security Advisory 3320-1
https://notcve.org/view.php?id=CVE-2015-3282
03 Aug 2015 — vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network. Vulnerabilidad en vos en OpenAFS en versiones anteriores a 1.6.13, cuando se actualizan las entradas VLDB, permite a atacantes remotos obtener información de la pila de memoria rastreando la red. It was discovered that OpenAFS, the implementation of the distributed filesystem AFS, contained several flaws that could result in information leak, denial-of-service or kernel panic. • http://www.debian.org/security/2015/dsa-3320 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3284 – Debian Security Advisory 3320-1
https://notcve.org/view.php?id=CVE-2015-3284
03 Aug 2015 — pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands. Vulnerabilidad en pioctls en OpenAFS 1.6.x en versiones anteriores a 1.6.13, permite a usuarios locales leer la memoria del kernel a través de comandos manipulados. It was discovered that OpenAFS, the implementation of the distributed filesystem AFS, contained several flaws that could result in information leak, denial-of-service or kernel panic. • http://www.debian.org/security/2015/dsa-3320 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2014-2852
https://notcve.org/view.php?id=CVE-2014-2852
14 Apr 2014 — OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet. OpenAFS anterior a 1.6.7 retrasa el hilo de escucha cuando falla un RXS_CheckResponse, lo que permite a atacantes remotos causar una denegación de servicio (degradación de rendimiento) a través de un paquete invalido. • http://www.debian.org/security/2014/dsa-2899 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 9%CPEs: 19EXPL: 0CVE-2014-0159 – Mandriva Linux Security Advisory 2014-244
https://notcve.org/view.php?id=CVE-2014-0159
10 Apr 2014 — Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument. Desbordamiento de buffer en la llamada de procedimientos remotos (RPC) GetStatistics64 en OpenAFS 1.4.8 anterior a 1.6.7 permite a atacantes remotos causar una denegación de servicio (caída) a través de un argumento statsVersion manipulado. Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows r... • http://openafs.org/pages/security/OPENAFS-SA-2014-001.txt • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 81EXPL: 0CVE-2013-4134 – Mandriva Linux Security Advisory 2014-244
https://notcve.org/view.php?id=CVE-2013-4134
29 Jul 2013 — OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. OpenAFS anterior a 1.4.15, 1.6.x anterior a 1.6.5 y 1.7.x anterior a 1.7.26 utiliza cifrado débil (DES) para las claves de Kerberos, lo que hace que sea más fácil para los atacantes remotos para obtener la clave de servicio. Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to... • http://www.debian.org/security/2013/dsa-2729 • CWE-310: Cryptographic Issues •