CVE-2013-1795
CVE-2013-1795
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
EPSS 3,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
Sources originales
- http://secunia.com/advisories/52480
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82585
- http://secunia.com/advisories/52342
- http://www.debian.org/security/2013/dsa-2638
- http://www.securityfocus.com/bid/58300
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-002.txt
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
- https://nvd.nist.gov/vuln/detail/CVE-2013-1795