CVE-2016-9772 OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC res...
MediumCVSS 5.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openafs(Debian:12) | < 1.6.20-1 | 1.6.20-1 |
| debian/openafs(Debian:13) | < 1.6.20-1 | 1.6.20-1 |
| openafs | <= 1.6.19 | No fix listed |
References
- Debian Security Tracker CVE-2016-9772 vendor-advisory
- [oss-security] 20161202 Re: CVE Request: OpenAFS: directory information leaks (OPENAFS-SA-2016-003) mailing-list patch third-party-advisory
- 94651 third-party-advisory vdb-entry
- www.openafs.org vendor-advisory
- bugs.debian.org issue-tracking