CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to…

published April 9, 2009

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03976 · 90.4th percentile
Published
2009-04-09T00:00Z
EPSS history
Timeline
  • 09 APR 00:00Z
    The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to…
    cvelistv5