CVE-2007-6599
CVE-2007-6599
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.
EPSS 1,7% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
Originalquellen
- http://www.securityfocus.com/bid/27132
- http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
- http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html
- http://secunia.com/advisories/28401
- http://secunia.com/advisories/28327
- http://www.openafs.org/security/OPENAFS-SA-2007-003.txt
- http://security.gentoo.org/glsa/glsa-200801-04.xml
- http://secunia.com/advisories/28433
- http://www.debian.org/security/2008/dsa-1458
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:207
- http://www.vupen.com/english/advisories/2008/0046
- http://secunia.com/advisories/28636
- https://nvd.nist.gov/vuln/detail/CVE-2007-6599