CVE-2009-1250: High severity transarc afs vulnerability
The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERRPTR macro.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1250?
CVE-2009-1250 has a severity rating that indicates it can cause a denial of service (system crash) due to improper handling of RX responses with large error codes.
How do I fix CVE-2009-1250?
To fix CVE-2009-1250, update your OpenAFS or IBM AFS installation to the latest patched version, ensuring it is beyond the affected releases.
Which versions of OpenAFS are affected by CVE-2009-1250?
CVE-2009-1250 affects OpenAFS versions 1.0 through 1.4.8 and 1.5.0 through 1.5.58.
Which versions of IBM AFS are affected by CVE-2009-1250?
CVE-2009-1250 affects IBM AFS versions up to and including 3.6 before Patch 19.
What is the nature of the vulnerability in CVE-2009-1250?
The vulnerability in CVE-2009-1250 is due to the cache manager in the client incorrectly interpreting a large error code as a pointer, leading to possible system crashes.