p PatchFirst

CVE-2007-6599

CVE-2007-6599

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

EPSS 1.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openafs Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.6.dfsg1-1

    Update to 1.4.6.dfsg1-1

  • openafs Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.6.dfsg1-1

    Update to 1.4.6.dfsg1-1

Original sources

Check your server →