GCVE - cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*

part: a version: 1.5.38 update: *

Vendor	Openafs (`2895e3fb-afe6-580a-bba4-9bdf01c03987`)
Product	Openafs (`56f758e7-9c22-5c93-8066-8e1d0b3bd6d0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openafs/openafs`	purl2cpe	2026-06-01 10:12:59.423255
`pkg:openafs/openafs`	purl2cpe	2026-06-01 10:12:59.423257
`pkg:rpm/opensuse/openafs`	purl2cpe	2026-06-01 10:12:59.423258

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-1795`	vulnerable	2026-06-08 05:03:56.418750	Details available Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow. Published: 2013-03-12T16:00:00.000Z Updated: 2024-08-06T15:13:32.976Z Open on db.gcve.eu Reference links http://secunia.com/advisories/52480 https://exchange.xforce.ibmcloud.com/vulnerabilities/82585 http://secunia.com/advisories/52342 http://www.debian.org/security/2013/dsa-2638 http://www.securityfocus.com/bid/58300	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1794`	vulnerable	2026-06-08 05:03:56.402111	Details available Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry. Published: 2013-03-12T16:00:00.000Z Updated: 2024-08-06T15:13:33.263Z Open on db.gcve.eu Reference links http://www.openafs.org/pages/security/OPENAFS-SA-2013-001.txt http://secunia.com/advisories/52480 http://secunia.com/advisories/52342 http://www.debian.org/security/2013/dsa-2638 http://www.mandriva.com/security/advisories?name=MDVSA-2014:244	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1251`	vulnerable	2026-06-08 04:51:14.089432	Details available Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. Published: 2009-04-09T00:00:00.000Z Updated: 2024-08-07T05:04:49.383Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/0117 http://www.openafs.org/security/OPENAFS-SA-2009-001.txt http://www.openafs.org/security/openafs-sa-2009-001.patch http://www.vupen.com/english/advisories/2009/0984 http://www.mandriva.com/security/advisories?name=MDVSA-2009:099	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1250`	vulnerable	2026-06-08 04:51:14.082136	Details available The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. Published: 2009-04-09T00:00:00.000Z Updated: 2024-08-07T05:04:49.436Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/0117 http://www.openafs.org/security/openafs-sa-2009-002.patch http://www.openafs.org/security/OPENAFS-SA-2009-002.txt http://www.vupen.com/english/advisories/2009/0984 http://www.mandriva.com/security/advisories?name=MDVSA-2009:099	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

OpenAFS 1.5.38

Notes

PURL mappings

Vulnerability references

Contribute