The cache manager in the client in OpenAFS 1.0 up to and including 1.4.8 and 1.5.0 up to and including 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote malicious users to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
openafs openafs 1.0.1 |
||
openafs openafs 1.0.4a |
||
openafs openafs 1.2.1 |
||
openafs openafs 1.2.5 |
||
openafs openafs 1.5 |
||
openafs openafs 1.3.5 |
||
openafs openafs 1.4.3 |
||
openafs openafs 1.4.5 |
||
openafs openafs 1.5.16 |
||
openafs openafs 1.5.33 |
||
openafs openafs 1.5.34 |
||
openafs openafs 1.0 |
||
openafs openafs 1.0.2 |
||
openafs openafs 1.2.2a |
||
openafs openafs 1.2.2 |
||
openafs openafs 1.2.6 |
||
openafs openafs 1.2.7 |
||
openafs openafs 1.3 |
||
openafs openafs 1.3.1 |
||
openafs openafs 1.5.31 |
||
openafs openafs 1.5.32 |
||
openafs openafs 1.5.50 |
||
openafs openafs 1.5.53 |
||
openafs openafs 1.4.6 |
||
openafs openafs 1.4.7 |
||
openafs openafs 1.4.8_pre2 |
||
openafs openafs 1.4.8_pre3 |
||
openafs openafs 1.3.74 |
||
openafs openafs 1.3.70 |
||
openafs openafs 1.3.77 |
||
ibm afs |
||
openafs openafs 1.2 |
||
openafs openafs 1.1.1a |
||
openafs openafs 1.2.4 |
||
openafs openafs 1.2.3 |
||
openafs openafs 1.4.4 |
||
openafs openafs 1.2.9 |
||
openafs openafs 1.5.17 |
||
openafs openafs 1.5.27 |
||
openafs openafs 1.5.35 |
||
openafs openafs 1.5.36 |
||
openafs openafs 1.5.52 |
||
openafs openafs 1.5.57 |
||
openafs openafs 1.4.7_pre3 |
||
openafs openafs 1.4.7_pre4 |
||
openafs openafs 1.1.0 |
||
openafs openafs 1.2.10 |
||
ibm afs 3.6 |
||
openafs openafs 1.5.54 |
||
openafs openafs 1.5.55 |
||
openafs openafs 1.5.56 |
||
openafs openafs 1.4.7_pre1 |
||
openafs openafs 1.4.7_pre2 |
||
openafs openafs 1.4.8 |
||
openafs openafs 1.4 |
||
openafs openafs 1.0.4 |
||
openafs openafs 1.0.3 |
||
openafs openafs 1.1.1 |
||
openafs openafs 1.1 |
||
openafs openafs 1.2.2b |
||
openafs openafs 1.2.8 |
||
openafs openafs 1.3.2 |
||
openafs openafs 1.3.81 |
||
openafs openafs 1.5.26 |
||
openafs openafs 1.5.30 |
||
openafs openafs 1.5.38 |
||
openafs openafs 1.5.39 |
||
openafs openafs 1.5.58 |
||
openafs openafs 1.4.0 |
||
openafs openafs 1.4.7_pre5 |
||
openafs openafs 1.4.8_pre1 |
||
openafs openafs 1.2.11 |
||
openafs openafs 1.2.13 |
Vulmon