Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Debian Security Advisory DSA 3387-1 (openafs - security update)

Information

Severity

Severity

Medium

Family

Family

Debian Local Security Checks

CVSSv2 Base

CVSSv2 Base

5.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Solution Type

Solution Type

Vendor Patch

Created

Created

7 years ago

Modified

Modified

6 years ago

Summary

John Stumpo discovered that OpenAFS, a distributed file system, does not fully initialize certain network packets before transmitting them. This can lead to a disclosure of the plaintext of previously processed packets.

Insight

Insight

AFS is a distributed filesystem allowing cross-platform sharing of files among multiple computers.

Affected Software

Affected Software

openafs on Debian Linux

Detection Method

Detection Method

This check tests the installed software version using the apt package manager.

Solution

Solution

For the oldstable distribution (wheezy), these problems have been fixed in version 1.6.1-3+deb7u5. For the stable distribution (jessie), these problems have been fixed in version 1.6.9-2+deb8u4. For the testing distribution (stretch) and the unstable distribution (sid), these problems have been fixed in version 1.6.15-1. We recommend that you upgrade your openafs packages.

Common Vulnerabilities and Exposures (CVE)