Lucene search
HistoryMar 14, 2013 - 3:13 a.m.
CVE-2013-1794
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.049
Percentile
92.8%
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Affected configurations
Node
openafsopenafsRange≤1.6.1
ORopenafsopenafsMatch1.5.10
ORopenafsopenafsMatch1.5.11
ORopenafsopenafsMatch1.5.12
ORopenafsopenafsMatch1.5.13
ORopenafsopenafsMatch1.5.14
ORopenafsopenafsMatch1.5.15
ORopenafsopenafsMatch1.5.16
ORopenafsopenafsMatch1.5.17
ORopenafsopenafsMatch1.5.18
ORopenafsopenafsMatch1.5.19
ORopenafsopenafsMatch1.5.20
ORopenafsopenafsMatch1.5.21
ORopenafsopenafsMatch1.5.22
ORopenafsopenafsMatch1.5.23
ORopenafsopenafsMatch1.5.24
ORopenafsopenafsMatch1.5.25
ORopenafsopenafsMatch1.5.26
ORopenafsopenafsMatch1.5.27
ORopenafsopenafsMatch1.5.28
ORopenafsopenafsMatch1.5.29
ORopenafsopenafsMatch1.5.30
ORopenafsopenafsMatch1.5.31
ORopenafsopenafsMatch1.5.32
ORopenafsopenafsMatch1.5.33
ORopenafsopenafsMatch1.5.34
ORopenafsopenafsMatch1.5.35
ORopenafsopenafsMatch1.5.36
ORopenafsopenafsMatch1.5.37
ORopenafsopenafsMatch1.5.38
ORopenafsopenafsMatch1.5.39
ORopenafsopenafsMatch1.5.50
ORopenafsopenafsMatch1.5.51
ORopenafsopenafsMatch1.5.52
ORopenafsopenafsMatch1.5.53
ORopenafsopenafsMatch1.5.54
ORopenafsopenafsMatch1.5.55
ORopenafsopenafsMatch1.5.56
ORopenafsopenafsMatch1.5.57
ORopenafsopenafsMatch1.5.58
ORopenafsopenafsMatch1.5.59
ORopenafsopenafsMatch1.5.60
ORopenafsopenafsMatch1.5.61
ORopenafsopenafsMatch1.5.62
ORopenafsopenafsMatch1.5.63
ORopenafsopenafsMatch1.5.64
ORopenafsopenafsMatch1.5.65
ORopenafsopenafsMatch1.5.66
ORopenafsopenafsMatch1.5.67
ORopenafsopenafsMatch1.5.68
ORopenafsopenafsMatch1.5.69
ORopenafsopenafsMatch1.5.70
ORopenafsopenafsMatch1.5.71
ORopenafsopenafsMatch1.5.72
ORopenafsopenafsMatch1.5.73
ORopenafsopenafsMatch1.5.74
ORopenafsopenafsMatch1.5.75
ORopenafsopenafsMatch1.5.76
ORopenafsopenafsMatch1.5.77
ORopenafsopenafsMatch1.5.78
ORopenafsopenafsMatch1.6.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openafs | openafs | * | cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.10 | cpe:2.3:a:openafs:openafs:1.5.10:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.11 | cpe:2.3:a:openafs:openafs:1.5.11:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.12 | cpe:2.3:a:openafs:openafs:1.5.12:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.13 | cpe:2.3:a:openafs:openafs:1.5.13:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.14 | cpe:2.3:a:openafs:openafs:1.5.14:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.15 | cpe:2.3:a:openafs:openafs:1.5.15:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.16 | cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.17 | cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.18 | cpe:2.3:a:openafs:openafs:1.5.18:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2013-1794
2013-03-14 00:00:00
nessus
nessus
Debian DSA-2638-1 : openafs - buffer overflow
2013-03-05 00:00:00
debiancve
debiancve
CVE-2013-1794
2013-03-14 03:13:37
freebsd
freebsd
net/openafs -- buffer overflow
2013-02-27 00:00:00
cvelist
cvelist
CVE-2013-1794
2013-03-12 16:00:00
prion
prion
Buffer overflow
2013-03-14 03:13:00
cve
cve
CVE-2013-1794
2013-03-14 03:13:37
securityvulns
securityvulns
OpenAFS buffer overflow
2013-03-11 00:00:00
[SECURITY] [DSA 2638-1] openafs security update
2013-03-11 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2638-1)
2013-03-03 00:00:00
Debian Security Advisory DSA 2638-1 (openafs - buffer overflow)
2013-03-04 00:00:00
Gentoo Security Advisory GLSA 201404-05
2015-09-29 00:00:00
osv
osv
openafs - buffer overflow
2013-03-04 00:00:00
debian
debian
[SECURITY] [DSA 2638-1] openafs security update
2013-03-04 22:30:08
gentoo
gentoo
OpenAFS: Multiple vulnerabilities
2014-04-07 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.049
Percentile
92.8%
Related for NVD:CVE-2013-1794