GCVE - cpe:2.3:a:openafs:openafs:1.4.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openafs:openafs:1.4.12:*:*:*:*:*:*:*

part: a version: 1.4.12 update: *

Vendor	Openafs (`2895e3fb-afe6-580a-bba4-9bdf01c03987`)
Product	Openafs (`56f758e7-9c22-5c93-8066-8e1d0b3bd6d0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openafs/openafs`	purl2cpe	2026-06-01 10:12:59.389484
`pkg:openafs/openafs`	purl2cpe	2026-06-01 10:12:59.389485
`pkg:rpm/opensuse/openafs`	purl2cpe	2026-06-01 10:12:59.389487

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0159`	vulnerable	2026-06-08 05:05:11.878623	Details available Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument. Published: 2014-04-14T15:00:00.000Z Updated: 2024-08-06T09:05:38.993Z Open on db.gcve.eu Reference links http://openafs.org/pages/security/OPENAFS-SA-2014-001.txt http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog http://secunia.com/advisories/57779 http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 http://secunia.com/advisories/57832	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4134`	vulnerable	2026-06-08 05:04:34.135546	Details available OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. Published: 2013-11-05T21:00:00.000Z Updated: 2024-08-06T16:30:50.014Z Open on db.gcve.eu Reference links http://www.debian.org/security/2013/dsa-2729 http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0431`	vulnerable	2026-06-08 04:56:37.072135	Details available The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third party information. Published: 2011-02-18T23:00:00.000Z Updated: 2024-08-06T21:51:08.803Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46428 http://www.debian.org/security/2011/dsa-2168 http://www.vupen.com/english/advisories/2011/0410 http://secunia.com/advisories/43371 http://www.securitytracker.com/id?1025095	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0430`	vulnerable	2026-06-08 04:56:37.071123	Details available Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors. Published: 2011-02-18T23:00:00.000Z Updated: 2024-08-06T21:51:09.085Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46428 http://www.debian.org/security/2011/dsa-2168 http://www.vupen.com/english/advisories/2011/0410 http://secunia.com/advisories/43371 http://www.securitytracker.com/id?1025095	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

OpenAFS 1.4.12

Notes

PURL mappings

Vulnerability references

Contribute