CVE-2007-6599: Race Condition
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the hostglock lock.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6599?
CVE-2007-6599 has a moderate severity level as it allows remote attackers to cause a denial of service.
How do I fix CVE-2007-6599?
To fix CVE-2007-6599, upgrade OpenAFS to a version 1.4.6 or higher that addresses the race condition.
Which versions of OpenAFS are affected by CVE-2007-6599?
CVE-2007-6599 affects OpenAFS versions 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27.
What kind of attack does CVE-2007-6599 enable?
CVE-2007-6599 enables remote attackers to execute a denial of service attack that crashes the daemon.
Is CVE-2007-6599 specific to any operating system?
CVE-2007-6599 is particularly noted in Debian GNU/Linux versions 3.1 and 4.0 due to the presence of OpenAFS.