Vulnerability Details : CVE-2013-1795
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2013-1795
- cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.12:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.13:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.14:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.15:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.74:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.73:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.76:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.75:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.68:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.67:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.66:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.65:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.22:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.21:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.72:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.71:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.64:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.63:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.37:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.29:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.28:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.20:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.19:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.60:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.59:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.51:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.25:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.24:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.23:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.78:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.77:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.70:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.69:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.62:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.61:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.18:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-1795
2.52%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 90 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-1795
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2013-1795
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-1795
-
http://www.openafs.org/pages/security/OPENAFS-SA-2013-002.txt
Vendor Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
mandriva.comBroken Link
-
http://www.securityfocus.com/bid/58300
OpenAFS CVE-2013-1795 Remote Integer Overflow VulnerabilityThird Party Advisory;VDB Entry
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/82585
OpenAFS ptserver integer overflow CVE-2013-1795 Vulnerability Report
-
http://www.debian.org/security/2013/dsa-2638
Debian -- Security Information -- DSA-2638-1 openafs
Jump to