6.5

CVE-2013-1794: openafs

CVSS: 6.5v2.0MediumModified
AliasesDEBIAN-CVE-2013-1794
Published 12-03-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-1794 is a medium (CVSS 6.5) vulnerability in openafs. EPSS estimates a 3.38% chance of exploitation in the next 30 days, higher than 88.6% of scored vulnerabilities.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v2.0 (NVD)
EPSS score
3.38%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

Timeline

  1. 12-03-2013
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

3.38%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.38% on 18-09-2026

18-09-202618-10-2026
EPSS score
3.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • openafs< 1.6.1-3
Openafs1 product
  • openafs≤ 1.6.1 | 1.5.10 | 1.5.11 | 1.5.12 | 1.5.13 | 1.5.14 | 1.5.15 | 1.5.16 | 1.5.17 | 1.5.18 | 1.5.19 | 1.5.20 | 1.5.21 | 1.5.22 | 1.5.23 | 1.5.24 | 1.5.25 | 1.5.26 | 1.5.27 | 1.5.28 | 1.5.29 | 1.5.30 | 1.5.31 | 1.5.32 | 1.5.33 | 1.5.34 | 1.5.35 | 1.5.36 | 1.5.37 | 1.5.38 | 1.5.39 | 1.5.50 | 1.5.51 | 1.5.52 | 1.5.53 | 1.5.54 | 1.5.55 | 1.5.56 | 1.5.57 | 1.5.58 | 1.5.59 | 1.5.60 | 1.5.61 | 1.5.62 | 1.5.63 | 1.5.64 | 1.5.65 | 1.5.66 | 1.5.67 | 1.5.68 | 1.5.69 | 1.5.70 | 1.5.71 | 1.5.72 | 1.5.73 | 1.5.74 | 1.5.75 | 1.5.76 | 1.5.77 | 1.5.78 | 1.6.0

2 vendors · 2 products

References

8 links