John Stumpo

**Name of the Vulnerable Software and Affected Versions** OpenAFS versions prior to 1.6.15 OpenAFS versions 1.7.x prior to 1.7.33 **Description** The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network due to improper initialization of the padding of a data structure when constructing an Rx acknowledgement (ACK) packet. **Recommendations** For OpenAFS versions prior to 1.6.15, update to version 1.6.15 or later. For OpenAFS versions 1.7.x prior to 1.7.33, update to version 1.7.33 or later.

**Name of the Vulnerable Software and Affected Versions** OpenAFS versions 1.5.75 through 1.5.78 OpenAFS versions 1.6.x before 1.6.15 OpenAFS versions 1.7.x before 1.7.33 **Description** The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network, due to improper initialization of padding at the end of an Rx acknowledgement (ACK) packet. **Recommendations** For OpenAFS versions 1.5.75 through 1.5.78, update to a version later than 1.5.78 to resolve the issue. For OpenAFS versions 1.6.x before 1.6.15, update to version 1.6.15 or later to resolve the issue. For OpenAFS versions 1.7.x before 1.7.33, update to version 1.7.33 or later to resolve the issue.