CVE-2009-1250

2009-04-09 02:30:00 2011-01-26 07:35:17

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE
Openafs Openafs 1.0 (not an official CPE) Openafs Openafs 1.2 (not an official CPE) Openafs Openafs 1.1 (not an official CPE) Openafs Openafs 1.4 (not an official CPE) Openafs Openafs 1.3 (not an official CPE) Openafs Openafs 1.5 (not an official CPE) Openafs Openafs 1.5.16 (not an official CPE) Openafs Openafs 1.5.17 (not an official CPE) Openafs Openafs 1.4.7 pre1 (not an official CPE) Openafs Openafs 1.4.7 pre2 (not an official CPE) Openafs Openafs 1.4.7 pre3 (not an official CPE) Openafs Openafs 1.4.7 pre5 (not an official CPE) Openafs Openafs 1.4.7 pre4 (not an official CPE) Openafs Openafs 1.5.58 (not an official CPE) Openafs Openafs 1.5.57 (not an official CPE) Openafs Openafs 1.4.8 pre1 (not an official CPE) Openafs Openafs 1.5.56 (not an official CPE) Openafs Openafs 1.4.8 pre2 (not an official CPE) Openafs Openafs 1.5.55 (not an official CPE) Openafs Openafs 1.4.8 pre3 (not an official CPE) Openafs Openafs 1.5.54 (not an official CPE) Openafs Openafs 1.5.53 (not an official CPE) Openafs Openafs 1.5.52 (not an official CPE) Openafs Openafs 1.5.50 (not an official CPE) Openafs Openafs 1.4.8 (not an official CPE) Openafs Openafs 1.1.1a (not an official CPE) Openafs Openafs 1.4.7 (not an official CPE) Openafs Openafs 1.3.5 (not an official CPE) Openafs Openafs 1.3.2 (not an official CPE) Openafs Openafs 1.0.4a (not an official CPE) Openafs Openafs 1.2.9 (not an official CPE) Openafs Openafs 1.3.1 (not an official CPE) Openafs Openafs 1.5.26 (not an official CPE) Openafs Openafs 1.5.27 (not an official CPE) Openafs Openafs 1.0.3 (not an official CPE) Openafs Openafs 1.0.4 (not an official CPE) Openafs Openafs 1.1.0 (not an official CPE) Openafs Openafs 1.1.1 (not an official CPE) Openafs Openafs 1.0.1 (not an official CPE) Openafs Openafs 1.0.2 (not an official CPE) Openafs Openafs 1.3.81 (not an official CPE) Ibm Afs 3.6 (not an official CPE) Openafs Openafs 1.5.31 (not an official CPE) Openafs Openafs 1.5.32 (not an official CPE) Openafs Openafs 1.5.33 (not an official CPE) Openafs Openafs 1.5.34 (not an official CPE) Openafs Openafs 1.5.30 (not an official CPE) Openafs Openafs 1.5.39 (not an official CPE) Openafs Openafs 1.5.35 (not an official CPE) Openafs Openafs 1.5.36 (not an official CPE) Openafs Openafs 1.5.38 (not an official CPE) Openafs Openafs 1.3.77 (not an official CPE) Openafs Openafs 1.2.13 (not an official CPE) Openafs Openafs 1.2.10 (not an official CPE) Openafs Openafs 1.2.11 (not an official CPE) Openafs Openafs 1.4.3 (not an official CPE) Openafs Openafs 1.2.4 (not an official CPE) Openafs Openafs 1.3.74 (not an official CPE) Openafs Openafs 1.4.4 (not an official CPE) Openafs Openafs 1.2.3 (not an official CPE) Openafs Openafs 1.2.2 (not an official CPE) Openafs Openafs 1.4.5 (not an official CPE) Openafs Openafs 1.4.6 (not an official CPE) Openafs Openafs 1.2.1 (not an official CPE) Openafs Openafs 1.2.8 (not an official CPE) Openafs Openafs 1.3.70 (not an official CPE) Openafs Openafs 1.4.0 (not an official CPE) Openafs Openafs 1.2.7 (not an official CPE) Openafs Openafs 1.2.6 (not an official CPE) Openafs Openafs 1.2.5 (not an official CPE) Ibm Afs 3.6 Patch14 (not an official CPE) Ibm Afs 3.6 Patch13 (not an official CPE) Ibm Afs 3.6 Patch12 (not an official CPE) Ibm Afs 3.6 Patch18 (not an official CPE) Ibm Afs 3.6 Patch16 (not an official CPE) Ibm Afs 3.6 Patch15 (not an official CPE) Openafs Openafs 1.2.2a (not an official CPE) Openafs Openafs 1.2.2b (not an official CPE)