CVE-2018-16948

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2

published September 12, 2018

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before returning, leaking memory contents from both the stack and the heap. Because the OpenAFS cache manager functions as an Rx server for the AFSCB service, clients are also susceptible to information leakage. For example, RXAFSCB_TellMeAboutYourself leaks kernel memory and KAM_ListEntry leaks kaserver memory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01992 · 80.5th percentile
Published
2018-09-12T01:00Z
EPSS history
Timeline
  • 12 SEP 01:00Z
    An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2
    cvelistv5