CVE-2016-4536 | BDVDB-2026-75920 Detail

Description#

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt
https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17
https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html

Exploit#

No public exploit known

History#

Version 12016-05-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.