| Package | Affected versions | Patched versions |
|---|---|---|
| openafs | = 1.7.1= 1.7.10= 1.7.11= 1.7.12= 1.7.13= 1.7.14= 1.7.15= 1.7.16= 1.7.17= 1.7.18= 1.7.19= 1.7.2= 1.7.20= 1.7.21= 1.7.22= 1.7.23= 1.7.24= 1.7.25= 1.7.26= 1.7.27= 1.7.28= 1.7.29= 1.7.3= 1.7.30= 1.7.31= 1.7.4= 1.7.8≤ 1.6.14.1 |
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free