Vulnerabilities > Openafs > Openafs > 1.4.12
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-11-05 | CVE-2013-4134 | Cryptographic Issues vulnerability in multiple products OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. | 4.3 |
| 2013-03-14 | CVE-2013-1795 | Numeric Errors vulnerability in Openafs Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow. | 5.0 |
| 2013-03-14 | CVE-2013-1794 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openafs Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry. | 6.5 |
| 2011-02-19 | CVE-2011-0431 | Improper Input Validation vulnerability in Openafs 1.4.12/1.4.14/1.4.7 The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. | 5.0 |
| 2011-02-19 | CVE-2011-0430 | Resource Management Errors vulnerability in Openafs 1.4.12/1.4.14/1.4.7 Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors. | 7.5 |