Vulnerabilities > Openafs > Openafs > 1.4.7
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2013-03-14 | CVE-2013-1795 | Numeric Errors vulnerability in Openafs Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow. | 5.0 |
2013-03-14 | CVE-2013-1794 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openafs Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry. | 6.5 |
2011-02-19 | CVE-2011-0431 | Improper Input Validation vulnerability in Openafs 1.4.12/1.4.14/1.4.7 The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. | 5.0 |
2011-02-19 | CVE-2011-0430 | Resource Management Errors vulnerability in Openafs 1.4.12/1.4.14/1.4.7 Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors. | 7.5 |
2009-04-09 | CVE-2009-1251 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. | 10.0 |
2009-04-09 | CVE-2009-1250 | Numeric Errors vulnerability in multiple products The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. | 7.8 |