GCVE - cpe:2.3:a:openafs:openafs:1.7.19:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openafs:openafs:1.7.19:*:*:*:*:*:*:*

part: a version: 1.7.19 update: *

Vendor	Openafs (`2895e3fb-afe6-580a-bba4-9bdf01c03987`)
Product	Openafs (`56f758e7-9c22-5c93-8066-8e1d0b3bd6d0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openafs/openafs`	purl2cpe	2026-06-01 10:12:59.423605
`pkg:openafs/openafs`	purl2cpe	2026-06-01 10:12:59.423606
`pkg:rpm/opensuse/openafs`	purl2cpe	2026-06-01 10:12:59.423607

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-7763`	vulnerable	2026-06-08 05:07:01.875466	Details available rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network. Published: 2015-11-06T21:00:00.000Z Updated: 2024-08-06T07:59:00.543Z Open on db.gcve.eu Reference links https://www.openafs.org/dl/openafs/1.6.15/RELNOTES-1.6.15 https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txt https://lists.openafs.org/pipermail/openafs-announce/2015/000493.html http://www.securitytracker.com/id/1034039 http://www.debian.org/security/2015/dsa-3387	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7762`	vulnerable	2026-06-08 05:07:01.851826	Details available rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network. Published: 2015-11-06T21:00:00.000Z Updated: 2024-08-06T07:58:59.988Z Open on db.gcve.eu Reference links https://www.openafs.org/dl/openafs/1.6.15/RELNOTES-1.6.15 https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txt https://lists.openafs.org/pipermail/openafs-announce/2015/000493.html http://www.securitytracker.com/id/1034039 http://www.debian.org/security/2015/dsa-3387	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4134`	vulnerable	2026-06-08 05:04:34.146338	Details available OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. Published: 2013-11-05T21:00:00.000Z Updated: 2024-08-06T16:30:50.014Z Open on db.gcve.eu Reference links http://www.debian.org/security/2013/dsa-2729 http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

OpenAFS 1.7.19

Notes

PURL mappings

Vulnerability references

Contribute