CVE-2013-1794
published 2013-03-14CVE-2013-1794: Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute…
PriorityP430medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
3.38%
87.4th percentile
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Affected
65 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openafs | < openafs 1.6.1-3 (bookworm) | openafs 1.6.1-3 (bookworm) |
| openafs | openafs | <= 1.6.1 | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gjvw-c69w-xg78: Buffer overflow in certain client utilities in OpenAFS before 1
ghsa_unreviewed·2022-05-17
CVE-2013-1794 [MEDIUM] CWE-119 GHSA-gjvw-c69w-xg78: Buffer overflow in certain client utilities in OpenAFS before 1
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
OSV
CVE-2013-1794: Buffer overflow in certain client utilities in OpenAFS before 1
osv·2013-03-14·CVSS 6.5
CVE-2013-1794 [MEDIUM] CVE-2013-1794: Buffer overflow in certain client utilities in OpenAFS before 1
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Debian
CVE-2013-1794: openafs - Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remot...
vendor_debian·2013·CVSS 6.5
CVE-2013-1794 [MEDIUM] CVE-2013-1794: openafs - Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remot...
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Scope: local
bookworm: resolved (fixed in 1.6.1-3)
bullseye: resolved (fixed in 1.6.1-3)
sid: resolved (fixed in 1.6.1-3)
trixie: resolved (fixed in 1.6.1-3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/52342http://secunia.com/advisories/52480http://www.debian.org/security/2013/dsa-2638http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openafs.org/pages/security/OPENAFS-SA-2013-001.txthttp://www.securityfocus.com/bid/58299https://exchange.xforce.ibmcloud.com/vulnerabilities/82582http://secunia.com/advisories/52342http://secunia.com/advisories/52480http://www.debian.org/security/2013/dsa-2638http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openafs.org/pages/security/OPENAFS-SA-2013-001.txthttp://www.securityfocus.com/bid/58299https://exchange.xforce.ibmcloud.com/vulnerabilities/82582
2013-03-14
Published