Debian/openafs: critical 9.8
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPC
Action: Upgrade openafs to 1.8.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.2-1 | - |
Fixed versions
| 1.8.2-1 |
Sources
- osv: DEBIAN-CVE-2018-16947#Debian:13/openafs
- https://security-tracker.debian.org/tracker/CVE-2018-16947
published · modified · JSON