Lucene search
HistoryMar 14, 2013 - 3:13 a.m.
CVE-2013-1795
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.041
Percentile
92.2%
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Affected configurations
Node
openafsopenafsRange≤1.6.1
ORopenafsopenafsMatch1.5.10
ORopenafsopenafsMatch1.5.11
ORopenafsopenafsMatch1.5.12
ORopenafsopenafsMatch1.5.13
ORopenafsopenafsMatch1.5.14
ORopenafsopenafsMatch1.5.15
ORopenafsopenafsMatch1.5.16
ORopenafsopenafsMatch1.5.17
ORopenafsopenafsMatch1.5.18
ORopenafsopenafsMatch1.5.19
ORopenafsopenafsMatch1.5.20
ORopenafsopenafsMatch1.5.21
ORopenafsopenafsMatch1.5.22
ORopenafsopenafsMatch1.5.23
ORopenafsopenafsMatch1.5.24
ORopenafsopenafsMatch1.5.25
ORopenafsopenafsMatch1.5.26
ORopenafsopenafsMatch1.5.27
ORopenafsopenafsMatch1.5.28
ORopenafsopenafsMatch1.5.29
ORopenafsopenafsMatch1.5.30
ORopenafsopenafsMatch1.5.31
ORopenafsopenafsMatch1.5.32
ORopenafsopenafsMatch1.5.33
ORopenafsopenafsMatch1.5.34
ORopenafsopenafsMatch1.5.35
ORopenafsopenafsMatch1.5.36
ORopenafsopenafsMatch1.5.37
ORopenafsopenafsMatch1.5.38
ORopenafsopenafsMatch1.5.39
ORopenafsopenafsMatch1.5.50
ORopenafsopenafsMatch1.5.51
ORopenafsopenafsMatch1.5.52
ORopenafsopenafsMatch1.5.53
ORopenafsopenafsMatch1.5.54
ORopenafsopenafsMatch1.5.55
ORopenafsopenafsMatch1.5.56
ORopenafsopenafsMatch1.5.57
ORopenafsopenafsMatch1.5.58
ORopenafsopenafsMatch1.5.59
ORopenafsopenafsMatch1.5.60
ORopenafsopenafsMatch1.5.61
ORopenafsopenafsMatch1.5.62
ORopenafsopenafsMatch1.5.63
ORopenafsopenafsMatch1.5.64
ORopenafsopenafsMatch1.5.65
ORopenafsopenafsMatch1.5.66
ORopenafsopenafsMatch1.5.67
ORopenafsopenafsMatch1.5.68
ORopenafsopenafsMatch1.5.69
ORopenafsopenafsMatch1.5.70
ORopenafsopenafsMatch1.5.71
ORopenafsopenafsMatch1.5.72
ORopenafsopenafsMatch1.5.73
ORopenafsopenafsMatch1.5.74
ORopenafsopenafsMatch1.5.75
ORopenafsopenafsMatch1.5.76
ORopenafsopenafsMatch1.5.77
ORopenafsopenafsMatch1.5.78
ORopenafsopenafsMatch1.6.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openafs | openafs | * | cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.10 | cpe:2.3:a:openafs:openafs:1.5.10:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.11 | cpe:2.3:a:openafs:openafs:1.5.11:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.12 | cpe:2.3:a:openafs:openafs:1.5.12:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.13 | cpe:2.3:a:openafs:openafs:1.5.13:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.14 | cpe:2.3:a:openafs:openafs:1.5.14:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.15 | cpe:2.3:a:openafs:openafs:1.5.15:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.16 | cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.17 | cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.18 | cpe:2.3:a:openafs:openafs:1.5.18:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-1795
2013-03-12 16:00:00
prion
prion
Integer overflow
2013-03-14 03:13:00
cve
cve
CVE-2013-1795
2013-03-14 03:13:40
ubuntucve
ubuntucve
CVE-2013-1795
2013-03-14 00:00:00
debiancve
debiancve
CVE-2013-1795
2013-03-14 03:13:40
nessus
nessus
Debian DSA-2638-1 : openafs - buffer overflow
2013-03-05 00:00:00
Mandriva Linux Security Advisory : openafs (MDVSA-2014:244)
2014-12-15 00:00:00
openvas
openvas
Debian Security Advisory DSA 2638-1 (openafs - buffer overflow)
2013-03-04 00:00:00
Debian: Security Advisory (DSA-2638-1)
2013-03-03 00:00:00
Gentoo Security Advisory GLSA 201404-05
2015-09-29 00:00:00
debian
debian
[SECURITY] [DSA 2638-1] openafs security update
2013-03-04 22:30:08
securityvulns
securityvulns
[SECURITY] [DSA 2638-1] openafs security update
2013-03-11 00:00:00
OpenAFS buffer overflow
2013-03-11 00:00:00
osv
osv
openafs - buffer overflow
2013-03-04 00:00:00
gentoo
gentoo
OpenAFS: Multiple vulnerabilities
2014-04-07 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.041
Percentile
92.2%
Related for NVD:CVE-2013-1795