CVE-2014-4044
OpenAFS 1.6.8 - Denial of Service via Uninitialized Memory Access in Host Structure
Title source: llmDescription
OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests.
References (4)
Core 4
Core References
Various Sources x_refsource_confirm
http://gerrit.openafs.org/#change%2C11283
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/06/13/3
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/68003
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/06/12/1
Scores
EPSS
0.0159
EPSS Percentile
72.8%
Details
CWE
CWE-119
Status
published
Products (1)
openafs/openafs
1.6.8
Published
Jun 17, 2014
Tracked Since
Feb 18, 2026