CVE-2015-3285

Mô tả

Tham khảo

• debian.org/security/2015/dsa-3320
• openafs.org/pages/security/OPENAFS-SA-2015-004.txt · Vendor Advisory
• securitytracker.com/id/1033262
• lists.openafs.org/pipermail/openafs-announce/2015/000486.html · Vendor Advisory
• openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13

Lỗ hổng khác của openafs

• CVE-2024-10397CAO 7.8A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.
• CVE-2024-10396TRUNG BÌNH 6.5An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uniniti…
• CVE-2024-10394CAO 7.8A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a P…
• CVE-2019-18603TRUNG BÌNH 5.9OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output …
• CVE-2019-18602CAO 7.5OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over…