CVE-2015-7763

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.5.75 through 1.5.78 OpenAFS versions 1.6.x before 1.6.15 OpenAFS versions 1.7.x before 1.7.33

Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network, due to improper initialization of padding at the end of an Rx acknowledgement (ACK) packet.

Recommendations For OpenAFS versions 1.5.75 through 1.5.78, update to a version later than 1.5.78 to resolve the issue. For OpenAFS versions 1.6.x before 1.6.15, update to version 1.6.15 or later to resolve the issue. For OpenAFS versions 1.7.x before 1.7.33, update to version 1.7.33 or later to resolve the issue.