CVE-2011-0430

2011-02-1901:00:03

CWE-399

mitre

web.nvd.nist.gov

cve-2011-0430

openafs

vulnerability

denial of service

remote attackers

arbitrary code

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.118

Percentile

95.3%

JSON

Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors.

Affected configurations

Nvd

Node

openafsopenafsMatch1.4.7

openafsopenafsMatch1.4.12

openafsopenafsMatch1.4.14

VendorProductVersionCPE
openafsopenafs1.4.7cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*
openafsopenafs1.4.12cpe:2.3:a:openafs:openafs:1.4.12:*:*:*:*:*:*:*
openafsopenafs1.4.14cpe:2.3:a:openafs:openafs:1.4.14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openafs	openafs	1.4.7	cpe:2.3:a:openafs:openafs:1.4.7:::::::*
openafs	openafs	1.4.12	cpe:2.3:a:openafs:openafs:1.4.12:::::::*
openafs	openafs	1.4.14	cpe:2.3:a:openafs:openafs:1.4.14:::::::*