CVE-2014-0159
CVE-2014-0159
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
EPSS 2.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openafs Debian:12
- Affected ranges
- ECOSYSTEM: < 1.6.7-1
Update to 1.6.7-1
openafs Debian:13
- Affected ranges
- ECOSYSTEM: < 1.6.7-1
Update to 1.6.7-1
openafs Ubuntu:14.04:LTS
- Versions
- 1.6.5-1ubuntu3
- 1.6.5.1-1
- 1.6.5.1-1ubuntu1
- 1.6.6~pre2-1
- 1.6.6-1
- Affected ranges
- ECOSYSTEM: < 1.6.7-1
Update to 1.6.7-1
Original sources
- http://openafs.org/pages/security/OPENAFS-SA-2014-001.txt
- http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog
- http://secunia.com/advisories/57779
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
- http://secunia.com/advisories/57832
- http://www.debian.org/security/2014/dsa-2899
- https://nvd.nist.gov/vuln/detail/CVE-2014-0159