PT-2014-3507

CVE-2014-0159

·

Published

2014-04-14

·

Updated

2016-08-24

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.4.8 through 1.6.7
Description The issue is related to a buffer overflow in the GetStatistics64 remote procedure call (RPC) that can be triggered by a crafted statsVersion argument, allowing remote attackers to cause a denial of service (crash).
Recommendations For OpenAFS versions 1.4.8 through 1.6.7, update to version 1.6.7 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2014-0159
DSA-2899-1
MGASA-2014-0515
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com