CVE-2009-1250: The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of…

Description

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

Exploitation

Is it being used?

Exploit prediction (EPSS)4.0% · higher than 90% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AF

Afs · Ibm

through 3.6; 3.6; 3.6; 3.6; 3.6; 3.6; +1 more · source: NVD

OP

Openafs · Openafs

1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.4a; +34 more · source: NVD