CVE-2015-7762

Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.15 OpenAFS versions 1.7.x prior to 1.7.33

Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network due to improper initialization of the padding of a data structure when constructing an Rx acknowledgement (ACK) packet.

Recommendations For OpenAFS versions prior to 1.6.15, update to version 1.6.15 or later. For OpenAFS versions 1.7.x prior to 1.7.33, update to version 1.7.33 or later.