openafs -- information disclosure

The OpenAFS development team reports: When constructing an Rx acknowledgment ACK packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol CVE-2015-7762. Additionally, OpenAFS ...

Mageia: Security Advisory (MGASA-2015-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201404-05

Gentoo Linux Local Security Checks GLSA 201404-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

The vulnerability of the OpenAFS file system, which allows a hacker to trigger a service failure

The vulnerability of the OpenAFS file system arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by using a specially crafted regular expression in the call to the remote VLListAttributesN2 procedure...

MGASA-2015-0337 Updated openafs package fixes security vulnerabilities

Updated openafs packages fix security vulnerabilities: Memory allocated by vos for VLDB entry structures was not cleared prior to use, meaning stack data could be sent over the network, possibly in the clear if crypt mode was not in use CVE-2015-3282. The default use by bos of clear rather than...

Updated openafs package fixes security vulnerabilities

Updated openafs packages fix security vulnerabilities: Memory allocated by vos for VLDB entry structures was not cleared prior to use, meaning stack data could be sent over the network, possibly in the clear if crypt mode was not in use CVE-2015-3282. The default use by bos of clear rather than...

IBM OpenAFS vlserver Buffer Overflow Vulnerability

IBM OpenAFS is a distributed file system from IBM in the United States that allows sharing of files and resources between systems over LANs and WANs. A security vulnerability exists in IBM OpenAFS 1.6.12 and earlier versions of vlserver server. A remote attacker can exploit this vulnerability to...

Out-of-bounds

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

UBUNTU-CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587

OpenAFS vlserver (OpenAFS) is affected by CVE-2015-6587: before version 1.6.13, remote authenticated users can trigger a denial of service via a crafted regular expression in VL_ListAttributesN2 RPC, causing an out-of-bounds read/crash. The issue is documented in Debian’s DLA-342-1 and OpenAFS ad...

CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

CVE-2015-6587: Improper Restriction of Operations within the Bounds of a Memory Buffer

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

OpenAFS Information Disclosure Vulnerability (CNVD-2015-05291)

OpenAFS is an open source distributed file system that allows sharing of files and resources between systems over local and wide area networks. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions of pioctls. A local attacker can exploit the vulnerability to read kernel memory...

OpenAFS 'bos' Command Spoofing Vulnerability

OpenAFS is an open source distributed file system that allows sharing of files and resources between systems over local and wide area networks. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions. An attacker can exploit the vulnerability to forge RPC commands in a network...

OpenAFS Denial of Service Vulnerability (CNVD-2015-05293)

OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions of vlserver. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds re...