CVE-2013-1794: Buffer Overflow
Published Mar 12, 2013
·Updated
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Affected Software
61 affected components
OpenAFS OpenAFS<=1.6.1
OpenAFS OpenAFS=1.5.10
OpenAFS OpenAFS=1.5.11
OpenAFS OpenAFS=1.5.12
OpenAFS OpenAFS=1.5.13
OpenAFS OpenAFS=1.5.14
OpenAFS OpenAFS=1.5.15
OpenAFS OpenAFS=1.5.16
OpenAFS OpenAFS=1.5.17
OpenAFS OpenAFS=1.5.18
OpenAFS OpenAFS=1.5.19
OpenAFS OpenAFS=1.5.20
OpenAFS OpenAFS=1.5.21
OpenAFS OpenAFS=1.5.22
OpenAFS OpenAFS=1.5.23
OpenAFS OpenAFS=1.5.24
OpenAFS OpenAFS=1.5.25
OpenAFS OpenAFS=1.5.26
OpenAFS OpenAFS=1.5.27
OpenAFS OpenAFS=1.5.28
OpenAFS OpenAFS=1.5.29
OpenAFS OpenAFS=1.5.30
OpenAFS OpenAFS=1.5.31
OpenAFS OpenAFS=1.5.32
OpenAFS OpenAFS=1.5.33
OpenAFS OpenAFS=1.5.34
OpenAFS OpenAFS=1.5.35
OpenAFS OpenAFS=1.5.36
OpenAFS OpenAFS=1.5.37
OpenAFS OpenAFS=1.5.38
OpenAFS OpenAFS=1.5.39
OpenAFS OpenAFS=1.5.50
OpenAFS OpenAFS=1.5.51
OpenAFS OpenAFS=1.5.52
OpenAFS OpenAFS=1.5.53
OpenAFS OpenAFS=1.5.54
OpenAFS OpenAFS=1.5.55
OpenAFS OpenAFS=1.5.56
OpenAFS OpenAFS=1.5.57
OpenAFS OpenAFS=1.5.58
OpenAFS OpenAFS=1.5.59
OpenAFS OpenAFS=1.5.60
OpenAFS OpenAFS=1.5.61
OpenAFS OpenAFS=1.5.62
OpenAFS OpenAFS=1.5.63
OpenAFS OpenAFS=1.5.64
OpenAFS OpenAFS=1.5.65
OpenAFS OpenAFS=1.5.66
OpenAFS OpenAFS=1.5.67
OpenAFS OpenAFS=1.5.68
OpenAFS OpenAFS=1.5.69
OpenAFS OpenAFS=1.5.70
OpenAFS OpenAFS=1.5.71
OpenAFS OpenAFS=1.5.72
OpenAFS OpenAFS=1.5.73
OpenAFS OpenAFS=1.5.74
OpenAFS OpenAFS=1.5.75
OpenAFS OpenAFS=1.5.76
OpenAFS OpenAFS=1.5.77
OpenAFS OpenAFS=1.5.78
OpenAFS OpenAFS=1.6.0
Event History
Mar 12, 2013
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1794?
CVE-2013-1794 is classified as a high severity vulnerability due to its potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2013-1794?
To fix CVE-2013-1794, update OpenAFS to version 1.6.2 or later.
3
What versions of OpenAFS are affected by CVE-2013-1794?
CVE-2013-1794 affects OpenAFS versions up to and including 1.6.1 and all versions prior to 1.6.2.
4
What kind of attack does CVE-2013-1794 allow?
CVE-2013-1794 allows an attacker to exploit a buffer overflow resulting in denial of service or potentially execute arbitrary code.
5
Who can exploit CVE-2013-1794?
CVE-2013-1794 can be exploited by remote authenticated users who have access to fileserver ACL entries.