UBUNTU-CVE-2014-0159

Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...

UBUNTU-CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

CVE-2014-0159

Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...

CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

CVE-2014-2852

OpenAFS prior to 1.6.7 delays the listen thread when an RXS_CheckResponse fails, enabling a remote attacker to cause denial of service (performance degradation) via an invalid packet. Multiple connected sources corroborate this issue and its association with CVE-2014-2852, with remediation docume...

CVE-2014-0159

CVE-2014-0159 affects OpenAFS: the GetStatistics64 RPC in OpenAFS 1.4.8 before 1.6.7 is vulnerable to a buffer overflow that can cause a remote denial of service (crash). Connected advisories confirm the issue exists in OpenAFS before 1.6.7 and indicate remediation by upgrading to newer OpenAFS r...

CVE-2014-0159

Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...

CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

CVE-2014-0159

Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...

CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

CVE-2014-0159: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the GetStatistics64 remote procedure call RPC in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service crash via a crafted statsVersion argument...

CVE-2014-2852: Improper Input Validation

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

Debian DSA-2899-1 : openafs - security update

Michael Meffie discovered that in OpenAFS, a distributed filesystem, an attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the fileserver, and potentially permitting the execution of arbitrary code. In addition, this update addresses a minor deni...

Scientific Linux Security Update : openafs on SL5.x, SL6.x i386/x86_64 (20140411)

An attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the server. The GetStatistics64 remote procedure call RPC was introduced in OpenAFS 1.4.8 as part of the support for fileserver partitions larger than 2 TiB. The GetStatistics64 RPC is used by...

FreeBSD : openafs -- Denial of Service (c0c31b27-bff3-11e3-9d09-000c2980a9f3)

The OpenAFS development team reports : An attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the server. The buffer overflow can be triggered by sending an unauthenticated request for file server statistical information. Clients are not affected...

[SECURITY] [DSA 2899-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2899-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 09, 2014 http://www.debian.org/security/faq -...

openafs -- Denial of Service

The OpenAFS development team reports: An attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the server. The buffer overflow can be triggered by sending an unauthenticated request for file server statistical information. Clients are not affected...

DSA-2899-1 openafs - security update

Bulletin has no description...

Debian Security Advisory DSA 2899-1 (openafs - security update)

Michael Meffie discovered that in OpenAFS, a distributed filesystem, an attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the fileserver, and potentially permitting the execution of arbitrary code. In addition, this update addresses a minor deni...

GLSA-201404-05 : OpenAFS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201404-05 OpenAFS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenAFS. Please review the CVE identifiers referenced below for details. Impact : An attacker could potentially execute arbitrary code wi...