CVE-2016-4536

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4)…

published May 13, 2016

CVSS
—
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01306 · 70.2th percentile
Published
2016-05-13T16:00Z
EPSS history
Timeline
  • 13 MAY 16:00Z
    The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4)…
    cvelistv5