Known vulnerabilities in OpenAFS

Software: OpenAFS
Software CPE: cpe:2.3:a:openafs_org:openafs:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenAFS OpenAFS is affected by 15 known vulnerabilities: 11 medium, 4 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22557 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18603
CWE-200 Medium
No
No
1.6.24, 1.8.5 06.11.2019 SB2019102915
#VU22555 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18602
CWE-200 Medium
No
No
1.6.24, 1.8.5 06.11.2019 SB2019102915
#VU22553 - Deserialization of Untrusted Data
CVE-2019-18601
CWE-502 Medium
No
No
1.6.24, 1.8.5 06.11.2019 SB2019102915
#VU16768 - Missing release of memory after effective lifetime
CVE-2018-16948
CWE-401 Low
No
No
1.6.23, 1.8.2 01.01.2019 SB2018091108
SB2018092305
#VU16767 - Permissions, Privileges, and Access Controls
CVE-2018-16947
CWE-264 Low
No
No
1.6.23, 1.8.2 01.01.2019 SB2018091108
SB2018092305
#VU16766 - Resource exhaustion
CVE-2018-16949
CWE-400 Low
No
No
1.6.23, 1.8.2 01.01.2019 SB2018091108
SB2018092305
#VU31384 - Reachable Assertion
CVE-2017-17432
CWE-617 Medium
No
No
1.6.22 06.12.2017 SB2017120614
#VU40607 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7763
CWE-200 Medium
No
No
- 06.11.2015 SB2015110604
#VU40608 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7762
CWE-200 Medium
No
No
- 06.11.2015 SB2015110605
#VU41546 - Memory corruption
CVE-2014-4044
CWE-119 Medium
No
No
- 17.06.2014 SB2014061705
#VU41821 - Improper input validation
CVE-2014-2852
CWE-20 Medium
No
No
- 14.04.2014 SB2014041402
#VU43003 - Heap-based Buffer Overflow
CVE-2013-1795
CWE-122 Medium
No
No
- 14.03.2013 SB2013031401
#VU43004 - Memory corruption
CVE-2013-1794
CWE-119 Low
No
No
- 14.03.2013 SB2013031401
#VU45305 - Resource Management Errors
CVE-2011-0430
CWE-399 Medium
No
No
- 19.02.2011 SB2011021902
#VU45306 - Improper input validation
CVE-2011-0431
CWE-20 Medium
No
No
- 19.02.2011 SB2011021902