PT-2011-1191 · Openafs · Openafs

Published 2011-02-18 · Updated 2014-04-07 · CVE-2011-0430

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.4.7 through 1.4.14 OpenAFS versions prior to 1.6.5

Description The issue concerns a double free vulnerability in the Rx server process, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. Additionally, multiple vulnerabilities in the OpenAFS package may lead to breaches of confidentiality, integrity, and availability of protected information, with exploitation possible via remote means.

Recommendations For OpenAFS versions 1.4.7 through 1.4.14, update to a version later than 1.4.14. For OpenAFS versions prior to 1.6.5, update to version 1.6.5 or later.

Fix

Weakness Enumeration

CWE-399

CWE-189

Related Identifiers

BDU:2015-09679

CVE-2011-0430

DSA-2168-1

Affected Products

Openafs

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2011-0430 · Security Note
• http://debian.org/security/2011/dsa-2168 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0410 · Vendor Advisory
• http://secunia.com/advisories/43407 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0411 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0430 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0430 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09679 · Security Note
• http://secunia.com/advisories/43371 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0430 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201404-05.xml · Note
• http://securitytracker.com/id?1025095 · Note
• http://securityfocus.com/bid/46428 · Note