CVE-2007-6599

2008-01-0402:46:00

CWE-362

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.071

Percentile

94.1%

JSON

Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

Affected configurations

Nvd

Node

openafsopenafsRange1.3.50–1.4.5

openafsopenafsRange1.5.0–1.5.27

Node

debiandebian_linuxMatch3.1

debiandebian_linuxMatch4.0

VendorProductVersionCPE
openafsopenafs*cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*
debiandebian_linux3.1cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
debiandebian_linux4.0cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openafs	openafs	*	cpe:2.3:a:openafs:openafs::::::::
debian	debian_linux	3.1	cpe:2.3:o:debian:debian_linux:3.1:::::::*
debian	debian_linux	4.0	cpe:2.3:o:debian:debian_linux:4.0:::::::*