{"action":"Upgrade openafs to 1.8.2-1 or later.","affected":[{"fixed":"1.8.2-1","introduced":"0"}],"component":"openafs","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.8.2-1"],"id":"tcs_01M5ND5K96833Y6V8M3AS1JCJG","modified_at":"2026-10-23T18:03:28.722754773Z","published_at":"2018-09-12T01:29:00.623Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-16949","https://security-tracker.debian.org/tracker/CVE-2018-16949"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-16949","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-16949"}],"summary":"An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array types, limited only by the inherent 32-bit l"}