VulnerabilityModified
CVE-2015-7763
rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting…
MEDIUM 5.0EPSS 2.13%
Does this matter?
Lower severity and a low EPSS score (2.13%). Track it; it rarely justifies an emergency change on its own.
Description
rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.13% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- openafs/openafs
- Source
- cve@mitre.org
References
- http://www.debian.org/security/2015/dsa-3387
- http://www.securitytracker.com/id/1034039
- https://lists.openafs.org/pipermail/openafs-announce/2015/000493.htmlVendor Advisory
- https://www.openafs.org/dl/openafs/1.6.15/RELNOTES-1.6.15Vendor Advisory
- https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txtVendor Advisory
- http://www.debian.org/security/2015/dsa-3387
- http://www.securitytracker.com/id/1034039
- https://lists.openafs.org/pipermail/openafs-announce/2015/000493.htmlVendor Advisory
- https://www.openafs.org/dl/openafs/1.6.15/RELNOTES-1.6.15Vendor Advisory
- https://www.openafs.org/pages/security/OPENAFS-SA-2015-007.txtVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.