CVE-2013-1794: openafs
CVSS: 6.5v2.0MediumModified
AliasesDEBIAN-CVE-2013-1794
Published 12-03-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-1794 is a medium (CVSS 6.5) vulnerability in openafs. EPSS estimates a 3.38% chance of exploitation in the next 30 days, higher than 88.6% of scored vulnerabilities.
CVSS score
6.5/10
010
Medium · v2.0 (NVD)EPSS score
3.38%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 12-03-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:S/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.38%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.38% on 18-09-2026
18-09-202618-10-2026
EPSS score3.38%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- openafs< 1.6.1-3
Openafs1 product
- openafs≤ 1.6.1 | 1.5.10 | 1.5.11 | 1.5.12 | 1.5.13 | 1.5.14 | 1.5.15 | 1.5.16 | 1.5.17 | 1.5.18 | 1.5.19 | 1.5.20 | 1.5.21 | 1.5.22 | 1.5.23 | 1.5.24 | 1.5.25 | 1.5.26 | 1.5.27 | 1.5.28 | 1.5.29 | 1.5.30 | 1.5.31 | 1.5.32 | 1.5.33 | 1.5.34 | 1.5.35 | 1.5.36 | 1.5.37 | 1.5.38 | 1.5.39 | 1.5.50 | 1.5.51 | 1.5.52 | 1.5.53 | 1.5.54 | 1.5.55 | 1.5.56 | 1.5.57 | 1.5.58 | 1.5.59 | 1.5.60 | 1.5.61 | 1.5.62 | 1.5.63 | 1.5.64 | 1.5.65 | 1.5.66 | 1.5.67 | 1.5.68 | 1.5.69 | 1.5.70 | 1.5.71 | 1.5.72 | 1.5.73 | 1.5.74 | 1.5.75 | 1.5.76 | 1.5.77 | 1.5.78 | 1.6.0
2 vendors · 2 products