CVE-2013-1795: Buffer Overflow
Published Mar 12, 2013
·Updated
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Affected Software
61 affected components
OpenAFS OpenAFS<=1.6.1
OpenAFS OpenAFS=1.5.10
OpenAFS OpenAFS=1.5.11
OpenAFS OpenAFS=1.5.12
OpenAFS OpenAFS=1.5.13
OpenAFS OpenAFS=1.5.14
OpenAFS OpenAFS=1.5.15
OpenAFS OpenAFS=1.5.16
OpenAFS OpenAFS=1.5.17
OpenAFS OpenAFS=1.5.18
OpenAFS OpenAFS=1.5.19
OpenAFS OpenAFS=1.5.20
OpenAFS OpenAFS=1.5.21
OpenAFS OpenAFS=1.5.22
OpenAFS OpenAFS=1.5.23
OpenAFS OpenAFS=1.5.24
OpenAFS OpenAFS=1.5.25
OpenAFS OpenAFS=1.5.26
OpenAFS OpenAFS=1.5.27
OpenAFS OpenAFS=1.5.28
OpenAFS OpenAFS=1.5.29
OpenAFS OpenAFS=1.5.30
OpenAFS OpenAFS=1.5.31
OpenAFS OpenAFS=1.5.32
OpenAFS OpenAFS=1.5.33
OpenAFS OpenAFS=1.5.34
OpenAFS OpenAFS=1.5.35
OpenAFS OpenAFS=1.5.36
OpenAFS OpenAFS=1.5.37
OpenAFS OpenAFS=1.5.38
OpenAFS OpenAFS=1.5.39
OpenAFS OpenAFS=1.5.50
OpenAFS OpenAFS=1.5.51
OpenAFS OpenAFS=1.5.52
OpenAFS OpenAFS=1.5.53
OpenAFS OpenAFS=1.5.54
OpenAFS OpenAFS=1.5.55
OpenAFS OpenAFS=1.5.56
OpenAFS OpenAFS=1.5.57
OpenAFS OpenAFS=1.5.58
OpenAFS OpenAFS=1.5.59
OpenAFS OpenAFS=1.5.60
OpenAFS OpenAFS=1.5.61
OpenAFS OpenAFS=1.5.62
OpenAFS OpenAFS=1.5.63
OpenAFS OpenAFS=1.5.64
OpenAFS OpenAFS=1.5.65
OpenAFS OpenAFS=1.5.66
OpenAFS OpenAFS=1.5.67
OpenAFS OpenAFS=1.5.68
OpenAFS OpenAFS=1.5.69
OpenAFS OpenAFS=1.5.70
OpenAFS OpenAFS=1.5.71
OpenAFS OpenAFS=1.5.72
OpenAFS OpenAFS=1.5.73
OpenAFS OpenAFS=1.5.74
OpenAFS OpenAFS=1.5.75
OpenAFS OpenAFS=1.5.76
OpenAFS OpenAFS=1.5.77
OpenAFS OpenAFS=1.5.78
OpenAFS OpenAFS=1.6.0
Event History
Mar 12, 2013
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1795?
CVE-2013-1795 is considered to have a medium severity level due to its potential for denial of service.
2
How do I fix CVE-2013-1795?
To fix CVE-2013-1795, you should upgrade to OpenAFS version 1.6.2 or later.
3
What type of vulnerability is CVE-2013-1795?
CVE-2013-1795 is a heap-based buffer overflow vulnerability caused by an integer overflow.
4
Which versions of OpenAFS are affected by CVE-2013-1795?
CVE-2013-1795 affects OpenAFS versions up to and including 1.6.1 as well as versions 1.5.10 to 1.6.0.
5
What can be exploited through CVE-2013-1795?
CVE-2013-1795 can be exploited by remote attackers to crash the OpenAFS ptserver.