CVE-2011-0430

Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors...

CVE-2011-0431

CVE-2011-0431 affects the OpenAFS kernel module: the afs_linux_lock function in afs/LINUX/osi_vnodeops.c does not properly handle errors in OpenAFS 1.4.14, 1.4.12, 1.4.7 (and possibly other versions), enabling a denial of service via unknown vectors. The issue is documented across multiple feeds ...

CVE-2011-0430

Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors...

CVE-2011-0430

Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors...

CVE-2011-0431

The afslinuxlock function in afs/LINUX/osivnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third par...

CVE-2011-0431: Improper Input Validation

The afslinuxlock function in afs/LINUX/osivnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third par...

PT-2011-1192

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.4.7 through 1.4.14 OpenAFS versions prior to 1.6.5 Description The issue is related to the improper handling of errors in the afs linux lock function, which can lead to a denial of service. Additionally, there are multiple...

PT-2011-1191

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.4.7 through 1.4.14 OpenAFS versions prior to 1.6.5 Description The issue concerns a double free vulnerability in the Rx server process, allowing remote attackers to cause a denial of service and potentially execute arbitrary...

CVE-2011-0430: Undefined Security Weakness

Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors...

[SECURITY] [DSA 2168-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2168-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2011 http://www.debian.org/security/faq -...

DSA-2168-1 openafs - several

Bulletin has no description...

[ GLSA 201101-05 ] OpenAFS: Arbitrary code execution

Gentoo Linux Security Advisory GLSA 201101-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

OpenAFS security vulnerabilities

Buffer overflow, uninitialized pointer dereference...

GLSA-201101-05 : OpenAFS: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201101-05 OpenAFS: Arbitrary code execution Two vulnerabilities were discovered: Simon Wilkinson discovered from a bug report by Toby Blake that the cache manager of OpenAFS contains a heap-based buffer overflow which is related t...

OpenAFS: Arbitrary code execution

Background OpenAFS is a distributed file system. Description Two vulnerabilities were discovered: Simon Wilkinson discovered from a bug report by Toby Blake that the cache manager of OpenAFS contains a heap-based buffer overflow which is related to the use of the ERRPTR macro CVE-2009-1250. A...

Mandriva Security Advisory MDVSA-2009:099-1 (openafs)

The remote host is missing an update to openafs announced via advisory MDVSA-2009:099-1. OpenVAS Vulnerability Test $Id: mdksa20090991.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:099-1 openafs Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:099-1 (openafs)

The remote host is missing an update to openafs announced via advisory MDVSA-2009:099-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:099 (openafs)

The remote host is missing an update to openafs announced via advisory MDVSA-2009:099. OpenVAS Vulnerability Test $Id: mdksa2009099.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:099 openafs Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:099 (openafs)

The remote host is missing an update to openafs announced via advisory MDVSA-2009:099. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : openafs (MDVSA-2009:099-1)

Multiple vulnerabilities has been found and corrected in openafs : The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Linux allows remote attackers to cause a denial of service system crash via an RX response with a large error-code value that is interpreted ...