CVE-2014-4044

概要

参考情報

• gerrit.openafs.org
• openwall.com/lists/oss-security/2014/06/12/1
• openwall.com/lists/oss-security/2014/06/13/3
• securityfocus.com/bid/68003

openafs のその他の脆弱性

• CVE-2024-10397高 7.8A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.
• CVE-2024-10396中 6.5An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uniniti…
• CVE-2024-10394高 7.8A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a P…
• CVE-2019-18603中 5.9OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output …
• CVE-2019-18602高 7.5OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over…