Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2015-7763

Disclosure Date: November 06, 2015 (last updated October 05, 2023)
rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
0
0
Attacker Value
Unknown

CVE-2014-0159

Disclosure Date: April 14, 2014 (last updated October 05, 2023)
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
0
0
Attacker Value
Unknown

CVE-2014-2852

Disclosure Date: April 14, 2014 (last updated October 05, 2023)
OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet.
0
0