CVE-2013-1795
Published: 14 March 2013
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
openafs Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Released
(1.4.12+dfsg-3+ubuntu0.2)
|
|
| oneiric |
Ignored
(end of life)
|
|
| precise |
Released
(1.6.1-1+ubuntu0.2)
|
|
| quantal |
Released
(1.6.1-2+ubuntu2.1)
|
|
| raring |
Not vulnerable
(1.6.2~pre2-2)
|
|
| upstream |
Released
(1.6.1-3)
|
|
|
Patches: upstream: http://www.openafs.org/pages/security/openafs-sa-2013-002.patch upstream: http://www.openafs.org/pages/security/openafs-sa-2013-002-1_4_14_1.patch |
||