CVE-2019-18603: Medium severity npm vulnerability
Published Oct 29, 2019
·Updated
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.
Affected Software
3 affected components
OpenAFS OpenAFS<1.6.24
OpenAFS OpenAFS>=1.8.0<1.8.5
Debian Debian Linux=8.0
Event History
Oct 29, 2019
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18603?
CVE-2019-18603 is classified as a medium severity vulnerability due to its potential for information leakage.
2
How do I fix CVE-2019-18603?
To remediate CVE-2019-18603, upgrade OpenAFS to version 1.6.24 or 1.8.5 or later.
3
What systems are affected by CVE-2019-18603?
CVE-2019-18603 affects OpenAFS versions before 1.6.24 and 1.8.x versions before 1.8.5, as well as Debian Linux 8.0.
4
What type of vulnerability is CVE-2019-18603?
CVE-2019-18603 is an information leakage vulnerability that occurs under certain error conditions.
5
Can CVE-2019-18603 lead to data exposure?
Yes, CVE-2019-18603 can lead to leakage of uninitialized RPC output variables over the network, which may expose sensitive information.