CVE-2009-1251

Опубликовано: 09 апр. 2009

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.2a:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.2b:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.70:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.74:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.77:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.3.81:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre4:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.7_pre5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8_pre1:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8_pre2:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.4.8_pre3:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*

cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12626

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2009-1251

ubuntu

почти 17 лет назад

CVE-2009-1251

debian

почти 17 лет назад

Heap-based buffer overflow in the cache manager in the client in OpenA ...

GHSA-2xj8-3jr2-7qw3

github

почти 4 года назад

BDU:2015-09403

fstec

около 15 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

BDU:2015-09679

fstec

почти 12 лет назад

EPSS

Процентиль: 94%

0.12626

Средний

10 Critical

CVSS2

Дефекты

CWE-119