Debian Openafs vulnerabilities

CVE-2016-4536 [MEDIUM] CVE-2016-4536: openafs - The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStor... The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic. Scope: local bookworm: resolved (fixed in 1.6.17-1) bullseye: resolved

CVE-2015-3282 [MEDIUM] CVE-2015-3282: openafs - vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attacker... vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network. Scope: local bookworm: resolved (fixed in 1.6.13-1) bullseye: resolved (fixed in 1.6.13-1) sid: resolved (fixed in 1.6.13-1) trixie: resolved (fixed in 1.6.13-1)

CVE-2016-9772 [MEDIUM] CVE-2016-9772: openafs - OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory... OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses. Scope: local bookworm: resolved (fixed in 1.6.20-1) bullseye: resolved (fixed in 1.6.20-1) sid: resolved (fixed in 1.6.20-1) trixie: resolved (fixed in 1.6.20-1

CVE-2015-7762 [MEDIUM] CVE-2015-7762: openafs - rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initi... rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network. Scope: local bookworm: resolved (fixed in 1.6.15-1) bullseye: resolved

CVE-2015-7763 [MEDIUM] CVE-2015-7763: openafs - rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before ... rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network. Scope: local bookworm: resolved (fixed in 1.6.15-1) bullseye: resolve

CVE-2014-0159 [MEDIUM] CVE-2014-0159: openafs - Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.... Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument. Scope: local bookworm: resolved (fixed in 1.6.7-1) bullseye: resolved (fixed in 1.6.7-1) sid: resolved (fixed in 1.6.7-1) trixie: resolved (fixed in 1.6.7-1)

CVE-2014-4044 [MEDIUM] CVE-2014-4044: openafs - OpenAFS 1.6.8 does not properly clear the fields in the host structure, which al... OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests. Scope: local bookworm: resolved (fixed in 1.6.9-1) bullseye: resolved (fixed in 1.6.9-1) sid: resolved (fixed in 1.6.9-1) trixie: resolved (fixed i

CVE-2013-4135 [MEDIUM] CVE-2013-4135: openafs - The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, o... The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. Scope: local bookworm: resolved (fixed in 1.6.5-1) bullseye: resolved (fixed in 1.6.5-1) sid: resolved (fixed in 1.6.5-1) trixie: resolved

CVE-2011-0431 [MEDIUM] CVE-2011-0431: openafs - The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in ... The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third party information. Scope: local bookworm: resolved (fixed in 1.4.14+dfs

CVE-2014-2852 [MEDIUM] CVE-2014-2852: openafs - OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, w... OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet. Scope: local bookworm: resolved (fixed in 1.6.7-1) bullseye: resolved (fixed in 1.6.7-1) sid: resolved (fixed in 1.6.7-1) trixie: resolved (fixed in 1.6.7-1)

CVE-2015-6587 [MEDIUM] CVE-2015-6587: openafs - The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause... The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC. Scope: local bookworm: resolved (fixed in 1.6.13-1) bullseye: resolved (fixed in 1.6.13-1) sid: resolved (fixed in 1.6.13-1) trixie: resolved (fixed in 1.6.13-1)

CVE-2013-4134 [MEDIUM] CVE-2013-4134: openafs - OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak enc... OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. Scope: local bookworm: resolved (fixed in 1.6.5-1) bullseye: resolved (fixed in 1.6.5-1) sid: resolved (fixed in 1.6.5-1) trixie: resolved (fixed in 1.6.5-1)

CVE-2007-6599 [MEDIUM] CVE-2007-6599: openafs - Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1... Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock. Scope: local bookworm: resolved (fi

CVE-2015-3285 [LOW] CVE-2015-3285: openafs - The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointe... The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command. Scope: local bookworm: resolved (fixed in 1.6.13-1) bullseye: resolved (fixed in 1.6.13-1) sid: resolved (fixed in 1.6.13-1) trixie

CVE-2015-3284 [LOW] CVE-2015-3284: openafs - pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory ... pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands. Scope: local bookworm: resolved (fixed in 1.6.13-1) bullseye: resolved (fixed in 1.6.13-1) sid: resolved (fixed in 1.6.13-1) trixie: resolved (fixed in 1.6.13-1)