CVE-2015-3285

概要

参考情報

• debian.org/security/2015/dsa-3320
• openafs.org/pages/security/OPENAFS-SA-2015-004.txt · Vendor Advisory
• securitytracker.com/id/1033262
• lists.openafs.org/pipermail/openafs-announce/2015/000486.html · Vendor Advisory
• openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13

openafs のその他の脆弱性

• CVE-2024-10397高 7.8A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.
• CVE-2024-10396中 6.5An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uniniti…
• CVE-2024-10394高 7.8A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a P…
• CVE-2019-18603中 5.9OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output …
• CVE-2019-18602高 7.5OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over…