CVE-2013-1795
published 2013-03-14CVE-2013-1795: Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which…
PriorityP426medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.28%
87.0th percentile
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Affected
65 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openafs | < openafs 1.6.1-3 (bookworm) | openafs 1.6.1-3 (bookworm) |
| openafs | openafs | <= 1.6.1 | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8r2p-hx5x-8fj7: Integer overflow in ptserver in OpenAFS before 1
ghsa_unreviewed·2022-05-17
CVE-2013-1795 [MEDIUM] GHSA-8r2p-hx5x-8fj7: Integer overflow in ptserver in OpenAFS before 1
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
OSV
CVE-2013-1795: Integer overflow in ptserver in OpenAFS before 1
osv·2013-03-14·CVSS 5.0
CVE-2013-1795 [MEDIUM] CVE-2013-1795: Integer overflow in ptserver in OpenAFS before 1
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Debian
CVE-2013-1795: openafs - Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to ...
vendor_debian·2013·CVSS 5.0
CVE-2013-1795 [MEDIUM] CVE-2013-1795: openafs - Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to ...
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Scope: local
bookworm: resolved (fixed in 1.6.1-3)
bullseye: resolved (fixed in 1.6.1-3)
sid: resolved (fixed in 1.6.1-3)
trixie: resolved (fixed in 1.6.1-3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/52342http://secunia.com/advisories/52480http://www.debian.org/security/2013/dsa-2638http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openafs.org/pages/security/OPENAFS-SA-2013-002.txthttp://www.securityfocus.com/bid/58300https://exchange.xforce.ibmcloud.com/vulnerabilities/82585http://secunia.com/advisories/52342http://secunia.com/advisories/52480http://www.debian.org/security/2013/dsa-2638http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openafs.org/pages/security/OPENAFS-SA-2013-002.txthttp://www.securityfocus.com/bid/58300https://exchange.xforce.ibmcloud.com/vulnerabilities/82585
2013-03-14
Published