Description
Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.
References (11)
Core 11
Core References
Vendor Advisory x_refsource_confirm
http://www.openafs.org/security/OPENAFS-SA-2009-001.txt
Patch x_refsource_confirm
http://www.openafs.org/security/openafs-sa-2009-001.patch
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:099
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/34407
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0117
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0984
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34655
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2009/dsa-1768
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201101-05.xml
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34684
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/42896
Scores
EPSS
0.0644
EPSS Percentile
92.9%
Details
CWE
CWE-119
Status
published
Products (50)
openafs/openafs
1.0
openafs/openafs
1.0.1
openafs/openafs
1.0.2
openafs/openafs
1.0.3
openafs/openafs
1.0.4
openafs/openafs
1.0.4a
openafs/openafs
1.1
openafs/openafs
1.1.0
openafs/openafs
1.1.1
openafs/openafs
1.1.1a
... and 40 more
Published
Apr 09, 2009
Tracked Since
Feb 18, 2026