Skip to content
Noroxi

openafs records

36 published records for vendor openafs.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
97.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

36 records
  • CVE-2009-1251
    42Plan

    Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows

    CriticalCVSS 10.0No exploitEPSS 6%

    unix · unixApr 8, 2009

  • CVE-2018-16947
    40Plan

    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2.

    CriticalCVSS 9.8No exploitEPSS 2%

    openafs · openafsSep 11, 2018

  • CVE-2003-0028
    35Monitor

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived fr

    HighCVSS 7.5No exploitEPSS 15%

    gnu · glibcMar 25, 2003

  • CVE-2024-10394
    33Monitor

    Theft of credentials in Unix client PAGs

    HighCVSS 8.4No exploitEPSS 0%

    openafs · openafsNov 14, 2024

  • CVE-2009-1250
    32Monitor

    The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remo

    HighCVSS 7.8No exploitEPSS 3%

    ibm · afsApr 8, 2009

  • CVE-2018-16949
    31Monitor

    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2.

    HighCVSS 7.5No exploitEPSS 3%

    openafs · openafsSep 11, 2018

  • CVE-2017-17432
    31Monitor

    OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system cras

    HighCVSS 7.5No exploitEPSS 3%

    openafs · openafsDec 5, 2017

  • CVE-2011-0430
    31Monitor

    Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to

    HighCVSS 7.5No exploitEPSS 3%

    openafs · openafsFeb 18, 2011

  • CVE-2007-1507
    31Monitor

    The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might

    HighCVSS 7.5No exploitEPSS 2%

    openafs · openafsMar 20, 2007

  • CVE-2018-16948
    31Monitor

    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2.

    HighCVSS 7.5No exploitEPSS 1%

    openafs · openafsSep 11, 2018

  • CVE-2015-8312
    31Monitor

    Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system

    HighCVSS 7.8No exploitEPSS 0%

    openafs · openafsMay 13, 2016

  • CVE-2019-18602
    30Monitor

    OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over

    HighCVSS 7.5No exploitEPSS 1%

    openafs · openafsOct 29, 2019

  • CVE-2019-18601
    30Monitor

    OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a

    HighCVSS 7.5No exploitEPSS 1%

    openafs · openafsOct 29, 2019

  • CVE-2024-10397
    30Monitor

    Preallocated buffer overflows in XDR responses

    HighCVSS 7.7No exploitEPSS 0%

    openafs · openafsNov 14, 2024

  • CVE-2015-3283
    28Monitor

    OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.

    MediumCVSS 6.8No exploitEPSS 2%

    openafs · openafsAug 12, 2015

  • CVE-2013-1794
    27Monitor

    Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) a

    MediumCVSS 6.5No exploitEPSS 3%

    openafs · openafsMar 13, 2013

  • CVE-2016-2860
    26Monitor

    The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypas

    MediumCVSS 6.5No exploitEPSS 1%

    openafs · openafsMay 13, 2016

  • CVE-2024-10396
    26Monitor

    Fileserver crash and possible information leak on StoreACL/FetchACL

    MediumCVSS 6.5No exploitEPSS 0%

    openafs · openafsNov 14, 2024

  • CVE-2019-18603
    23Monitor

    OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output

    MediumCVSS 5.9No exploitEPSS 1%

    openafs · openafsOct 29, 2019

  • CVE-2016-9772
    22Monitor

    OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache part

    MediumCVSS 5.3No exploitEPSS 1%

    openafs · openafsFeb 6, 2017

  • CVE-2013-1795
    21Monitor

    Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the

    MediumCVSS 5.0No exploitEPSS 3%

    openafs · openafsMar 13, 2013

  • CVE-2014-0159
    21Monitor

    Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial o

    MediumCVSS 5.0No exploitEPSS 2%

    openafs · openafsApr 14, 2014

  • CVE-2015-7763
    21Monitor

    rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an

    MediumCVSS 5.0No exploitEPSS 2%

    openafs · openafsNov 6, 2015

  • CVE-2015-7762
    21Monitor

    rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an R

    MediumCVSS 5.0No exploitEPSS 2%

    openafs · openafsNov 6, 2015

  • CVE-2011-0431
    21Monitor

    The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions d

    MediumCVSS 5.0No exploitEPSS 2%

    openafs · openafsFeb 18, 2011