CVE-2016-9772

Description

References

• openwall.com/lists/oss-security/2016/12/02/9 · Mailing List
• securityfocus.com/bid/94651 · Third Party Advisory
• openafs.org/pages/security/OPENAFS-SA-2016-003.txt · Vendor Advisory

Altre vulnerabilità di openafs

• CVE-2024-10397ALTO 7.8A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.
• CVE-2024-10396MEDIO 6.5An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uniniti…
• CVE-2024-10394ALTO 7.8A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a P…
• CVE-2019-18603MEDIO 5.9OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output …
• CVE-2019-18602ALTO 7.5OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over…