OP
Product
Openafs
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 5Low 0
Watch
Add Openafs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10396 | 6.5 | Nov 14 | An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and possibly store… Affected: 1.0 before 1.6.25; 1.8.0 before 1.8.13; 1.9.0 |
| CVE-2016-2860 | 6.5 | May 13 | The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and… Affected: through 1.6.16 |
| CVE-2019-18603 | 5.9 | Oct 29 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to… Affected: before 1.6.24; 1.8.0 before 1.8.5 |
| CVE-2016-9772 | 5.3 | Feb 6 | OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition,… Affected: through 1.6.19 |
| CVE-2016-4536 | 5.3 | May 13 | The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes… Affected: through 1.6.16 |
Showing 5