PT-2011-1191 · Openafs · Openafs

Publicado 2011-02-18 · Atualizado 2014-04-07 · CVE-2011-0430

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.4.7 through 1.4.14 OpenAFS versions prior to 1.6.5

Description The issue concerns a double free vulnerability in the Rx server process, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. Additionally, multiple vulnerabilities in the OpenAFS package may lead to breaches of confidentiality, integrity, and availability of protected information, with exploitation possible via remote means.

Recommendations For OpenAFS versions 1.4.7 through 1.4.14, update to a version later than 1.4.14. For OpenAFS versions prior to 1.6.5, update to version 1.6.5 or later.

Correção

Enumeração de Fraquezas

CWE-399

CWE-189

Identificadores relacionados

BDU:2015-09679

CVE-2011-0430

DSA-2168-1

Produtos afetados

Openafs

Referências · 13

• https://nvd.nist.gov/vuln/detail/CVE-2011-0430 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-201404-05.xml · Nota
• http://debian.org/security/2011/dsa-2168 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0410 · Aviso do Fabricante
• http://securitytracker.com/id?1025095 · Nota
• http://secunia.com/advisories/43407 · Aviso do Fabricante
• http://securityfocus.com/bid/46428 · Nota
• http://vupen.com/english/advisories/2011/0411 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-0430 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-0430 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09679 · Nota de Segurança
• http://secunia.com/advisories/43371 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0430 · Aviso do Fabricante