tocsin

Debian/openafs: high 7.5

OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or application crash) via crafted fields, as demonstrated

Action: Upgrade openafs to 1.6.22-1 or later.

Affected

introducedfixedlast affected
01.6.22-1-

Fixed versions

1.6.22-1

Sources

published · modified · JSON