Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-7763
HistoryNov 06, 2015 - 12:00 a.m.

CVE-2015-7763

2015-11-0600:00:00
ubuntu.com
ubuntu.com
10

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.006

Percentile

77.7%

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x
before 1.7.33 does not properly initialize padding at the end of an Rx
acknowledgement (ACK) packet, which allows remote attackers to obtain
sensitive information by (1) conducting a replay attack or (2) sniffing the
network.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenafs< 1.6.1-1+ubuntu0.7UNKNOWN
ubuntu14.04noarchopenafs< 1.6.7-1ubuntu1.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.006

Percentile

77.7%