Skip to content
OpenAdvisories

Product · The OpenAFS Foundation

OpenAFS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-10396

    Fileserver crash and possible information leak on StoreACL/FetchACL

    An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and possibly store garbage data in the audit log. Malformed ACLs provided in responses to client FetchAC…

    The OpenAFS Foundation OpenAFS openafs openafs Debian Ubuntu