678 matches found
CVE-2014-4044
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service uninitialized memory access and crash via unspecified vectors related to TMAY requests...
Code injection
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service uninitialized memory access and crash via unspecified vectors related to TMAY requests...
CVE-2014-4044
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service uninitialized memory access and crash via unspecified vectors related to TMAY requests...
CVE-2014-4044
OpenAFS 1.6.8 contains a vulnerability (CVE-2014-4044) where host structure fields are not cleared, enabling remote attackers to cause a DoS via TMAY-related vectors (uninitialized memory access leading to crash). The OpenVAS/Mageia OSV entries corroborate the issue and provide context. Remediati...
CVE-2014-4044
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service uninitialized memory access and crash via unspecified vectors related to TMAY requests...
CVE-2014-4044
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service uninitialized memory access and crash via unspecified vectors related to TMAY requests...
CVE-2014-4044: Improper Restriction of Operations within the Bounds of a Memory Buffer
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service uninitialized memory access and crash via unspecified vectors related to TMAY requests...
OpenAFS uninitialized memory
Uninitialized memory access is possible...
[oss-security] CVE request: OpenAFS 1.6.8 TMAY fileserver crashes
New code introduced in OpenAFS 1.6.8 does not properly zero fields in the host structure in the OpenAFS fileserver, leading to some variables in the host structure being left initialized from recycled heap memory. While no mechanism for exploitation is currently known, the affected file server...
[SECURITY] [DSA 2899-1] openafs security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2899-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 09, 2014 http://www.debian.org/security/faq -...
OpenAFS DoS
Buffer overflow in GetStatistics64 RPC call...
OpenAFS GetStatistics64 RPC远程拒绝服务漏洞
Bugtraq ID:66776 CVE ID:CVE-2014-0159 OpenAFS是一款开放源代码的分布式文件系统。 OpenAFS GetStatistics64 RPC存在错误，允许攻击者利用漏洞发送特殊的请求触发缓冲区溢出和使应用程序崩溃。 0 OpenAFS 1.4.8 - 1.6.6 OpenAFS 1.6.7版本已修复该漏洞，建议用户下载使用： http://openafs.org/...
DEBIAN-CVE-2014-2852
OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...
CVE-2014-2852
OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...
CVE-2014-2852
OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...
CVE-2014-0159
Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...
CVE-2014-0159
Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...
DEBIAN-CVE-2014-0159
Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...
Buffer overflow
Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...
Design/Logic Flaw
OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...