CVE-2015-7762
published 2015-11-06CVE-2015-7762: rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement…
PriorityP424medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.13%
80.1th percentile
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | openafs | < openafs 1.6.15-1 (bookworm) | openafs 1.6.15-1 (bookworm) |
| openafs | openafs | <= 1.6.14.1 | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
| openafs | openafs | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2015-7762: openafs - rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initi...
vendor_debian·2015·CVSS 5.0
CVE-2015-7762 [MEDIUM] CVE-2015-7762: openafs - rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initi...
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
Scope: local
bookworm: resolved (fixed in 1.6.15-1)
bullseye: resolved (fixed in 1.6.15-1)
sid: resolved (fixed in 1.6.15-1)
trixie: resolved (fixed in 1.6.15-1)
GHSA
GHSA-p847-p2jr-v5qq: rx/rx
ghsa_unreviewed·2022-05-17
CVE-2015-7762 [MEDIUM] CWE-200 GHSA-p847-p2jr-v5qq: rx/rx
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
OSV
CVE-2015-7762: rx/rx
osv·2015-11-06·CVSS 5.0
CVE-2015-7762 [MEDIUM] CVE-2015-7762: rx/rx
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.debian.org/security/2015/dsa-3387http://www.securitytracker.com/id/1034039https://lists.openafs.org/pipermail/openafs-announce/2015/000493.htmlhttps://www.openafs.org/dl/openafs/1.6.15/RELNOTES-1.6.15https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txthttp://www.debian.org/security/2015/dsa-3387http://www.securitytracker.com/id/1034039https://lists.openafs.org/pipermail/openafs-announce/2015/000493.htmlhttps://www.openafs.org/dl/openafs/1.6.15/RELNOTES-1.6.15https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txt
2015-11-06
Published