CVE-2014-0159

Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
openafsopenafs
1.4.8
openafsopenafs
1.4.9
openafsopenafs
1.4.10
openafsopenafs
1.4.11
openafsopenafs
1.4.12
openafsopenafs
1.4.14
openafsopenafs
1.4.14.1
openafsopenafs
1.4.15
openafsopenafs
1.6.0
openafsopenafs
1.6.1
openafsopenafs
1.6.2
openafsopenafs
1.6.2.1
openafsopenafs
1.6.3
openafsopenafs
1.6.4
openafsopenafs
1.6.5
openafsopenafs
1.6.5.1
openafsopenafs
1.6.5.2
openafsopenafs
1.6.6
debiandebian_linux
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openafs
bullseye
1.8.6-5
fixed
bookworm
1.8.9-1
fixed
sid
1.8.12.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openafs
trusty
Fixed 1.6.7-1
released
saucy
ignored
quantal
ignored
precise
Fixed 1.6.1-1+ubuntu0.4
released
lucid
Fixed 1.4.12+dfsg-3+ubuntu0.4
released