GCVE - cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*

part: a version: 1.1.1a update: *

Vendor	Openafs (`2895e3fb-afe6-580a-bba4-9bdf01c03987`)
Product	Openafs (`56f758e7-9c22-5c93-8066-8e1d0b3bd6d0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openafs/openafs`	purl2cpe	2026-06-01 10:12:59.389259
`pkg:openafs/openafs`	purl2cpe	2026-06-01 10:12:59.389260
`pkg:rpm/opensuse/openafs`	purl2cpe	2026-06-01 10:12:59.389261

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4134`	vulnerable	2026-06-08 05:04:34.113241	Details available OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. Published: 2013-11-05T21:00:00.000Z Updated: 2024-08-06T16:30:50.014Z Open on db.gcve.eu Reference links http://www.debian.org/security/2013/dsa-2729 http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1251`	vulnerable	2026-06-08 04:51:14.088575	Details available Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. Published: 2009-04-09T00:00:00.000Z Updated: 2024-08-07T05:04:49.383Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/0117 http://www.openafs.org/security/OPENAFS-SA-2009-001.txt http://www.openafs.org/security/openafs-sa-2009-001.patch http://www.vupen.com/english/advisories/2009/0984 http://www.mandriva.com/security/advisories?name=MDVSA-2009:099	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1250`	vulnerable	2026-06-08 04:51:14.056659	Details available The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. Published: 2009-04-09T00:00:00.000Z Updated: 2024-08-07T05:04:49.436Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/0117 http://www.openafs.org/security/openafs-sa-2009-002.patch http://www.openafs.org/security/OPENAFS-SA-2009-002.txt http://www.vupen.com/english/advisories/2009/0984 http://www.mandriva.com/security/advisories?name=MDVSA-2009:099	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0028`	vulnerable	2026-06-08 04:47:20.265541	Details available Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391. Published: 2003-03-21T05:00:00.000Z Updated: 2024-08-08T01:36:25.372Z Open on db.gcve.eu Reference links http://www.linuxsecurity.com/advisories/engarde_advisory-3024.html http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html http://www.mandriva.com/security/advisories?name=MDKSA-2003:037 http://www.redhat.com/support/errata/RHSA-2003-052.html http://www.cert.org/advisories/CA-2003-10.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

OpenAFS 1.1.1a

Notes

PURL mappings

Vulnerability references

Contribute