Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jv93-j376-qhrw

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

EPSS

Процентиль: 53%
0.00296
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 9 лет назад

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

CVSS3: 5.3
nvd
больше 9 лет назад

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

CVSS3: 5.3
debian
больше 9 лет назад

The client in OpenAFS before 1.6.17 does not properly initialize the ( ...

EPSS

Процентиль: 53%
0.00296
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200