CVE-2014-0159
published 2014-04-14CVE-2014-0159: Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash)…
PriorityP423medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.18%
80.5th percentile
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | openafs | < openafs 1.6.7-1 (bookworm) | openafs 1.6.7-1 (bookworm) |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | >= 0 < 1.6.7-1 | 1.6.7-1 |
| openafs | openafs | >= 0 < 1.6.7-1 | 1.6.7-1 |
| openafs | openafs | >= 0 < 1.6.7-1 | 1.6.7-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2014-0159: openafs - Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1....
vendor_debian·2014·CVSS 5.0
CVE-2014-0159 [MEDIUM] CVE-2014-0159: openafs - Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1....
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
Scope: local
bookworm: resolved (fixed in 1.6.7-1)
bullseye: resolved (fixed in 1.6.7-1)
sid: resolved (fixed in 1.6.7-1)
trixie: resolved (fixed in 1.6.7-1)
GHSA
GHSA-3gc4-fv8j-6mrr: Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1
ghsa_unreviewed·2022-05-17
CVE-2014-0159 [MEDIUM] CWE-119 GHSA-3gc4-fv8j-6mrr: Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
OSV
CVE-2014-0159: Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1
osv·2014-04-14·CVSS 5.0
CVE-2014-0159 [MEDIUM] CVE-2014-0159: Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://openafs.org/pages/security/OPENAFS-SA-2014-001.txthttp://secunia.com/advisories/57779http://secunia.com/advisories/57832http://www.debian.org/security/2014/dsa-2899http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLoghttp://openafs.org/pages/security/OPENAFS-SA-2014-001.txthttp://secunia.com/advisories/57779http://secunia.com/advisories/57832http://www.debian.org/security/2014/dsa-2899http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog
2014-04-14
Published