debian/openafs vulnerabilities

Latest debian/openafs CVEs

Newest publication first · page 1 of 3

1. DLA-4168-2 openafs - regression update

   Published 2025-09-08

   Unknown

2. DLA-4168-1 openafs - security update

   Published 2025-05-17

   Unknown

3. DSA-5842-1 openafs - security update

   Published 2025-01-11

   Unknown

4. CVE-2024-10397 Preallocated buffer overflows in XDR responses

   Published 2024-11-14

   High·CVSS 7.7 EPSS 0.40%

   A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.

5. CVE-2024-10396 Fileserver crash and possible information leak on StoreACL/FetchACL

   Published 2024-11-14

   Medium·CVSS 6.5 EPSS 0.56%

   An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and possibly store garbage data in the audit log. Malformed ACLs provided in responses to client FetchACL RPCs can cause clie...

6. CVE-2024-10394 Theft of credentials in Unix client PAGs

   Published 2024-11-14

   High·CVSS 8.4 EPSS 0.20%

   A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.

7. DLA-1982-1 openafs - security update

   Published 2019-11-05

   Unknown

8. CVE-2019-18602 OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer.

   Published 2019-10-29

   High·CVSS 7.5 EPSS 1.5%

   OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer.

9. CVE-2019-18603 OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.

   Published 2019-10-29

   Medium·CVSS 5.9 EPSS 1.2%

   OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.

10. CVE-2019-18601 OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Debug RPC calls to crash a database server w...

    Published 2019-10-29

    High·CVSS 7.5 EPSS 1.4%

    OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Debug RPC calls to crash a database server within the SVOTE_Debug RPC handler.

11. DSA-4302-1 openafs - security update

    Published 2018-09-23

    Unknown

12. DLA-1513-1 openafs - security update

    Published 2018-09-21

    Unknown

13. CVE-2018-16949 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array types, limited only by the inherent 32-bit l...

    Published 2018-09-12

    High·CVSS 7.5 EPSS 3.1%

    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array types, limited only by the inherent 32-bit length field to 4 GB. An unauthenticated attacker could send, or claim to send, l...

14. CVE-2018-16948 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before returning, leaking memory contents from both...

    Published 2018-09-12

    High·CVSS 7.5 EPSS 2.0%

    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before returning, leaking memory contents from both the stack and the heap. Because the OpenAFS cache manager functions as an Rx se...

15. CVE-2018-16947 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPC...

    Published 2018-09-12

    Critical·CVSS 9.8 EPSS 2.6%

    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator...

16. DLA-1213-1 openafs - security update

    Published 2017-12-20

    Unknown

17. DSA-4067-1 openafs - security update

    Published 2017-12-17

    Unknown

18. CVE-2017-17432 OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or application crash) via crafted fields, as demonstrated....

    Published 2017-12-06

    High·CVSS 7.5 EPSS 3.1%

    OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or application crash) via crafted fields, as demonstrated by an integer underflow and assertion failure for a small MTU value.

19. CVE-2016-9772 OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC res...

    Published 2017-02-06

    Medium·CVSS 5.3 EPSS 1.7%

    OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.

20. DLA-733-1 openafs - security update

    Published 2016-12-03

    Unknown

21. DLA-493-1 openafs - security update

    Published 2016-05-29

    Unknown

22. CVE-2016-4536 The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow....

    Published 2016-05-13

    Medium·CVSS 5.3 EPSS 1.3%

    The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to...

23. CVE-2016-2860 The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups a...

    Published 2016-05-13

    Medium·CVSS 6.5 EPSS 1.5%

    The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups as administrators by leveraging mishandling of the creator ID.

24. CVE-2015-8312 Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.

    Published 2016-05-13

    High·CVSS 7.8 EPSS 0.36%

    Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.

25. DSA-3569-1 openafs - security update

    Published 2016-05-05

    Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.