CVE-2013-1795: openafs Numeric Errors
CVSS: 5.0v2.0MediumModified
AliasesDEBIAN-CVE-2013-1795
Published 12-03-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-1795 is a medium (CVSS 5.0) Numeric Errors vulnerability in openafs. EPSS estimates a 3.28% chance of exploitation in the next 30 days, higher than 88.2% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
3.28%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 12-03-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
3.28%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.28% on 19-09-2026
19-09-202619-10-2026
EPSS score3.28%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- openafs< 1.6.1-3
Openafs1 product
- openafs≤ 1.6.1 | 1.5.10 | 1.5.11 | 1.5.12 | 1.5.13 | 1.5.14 | 1.5.15 | 1.5.16 | 1.5.17 | 1.5.18 | 1.5.19 | 1.5.20 | 1.5.21 | 1.5.22 | 1.5.23 | 1.5.24 | 1.5.25 | 1.5.26 | 1.5.27 | 1.5.28 | 1.5.29 | 1.5.30 | 1.5.31 | 1.5.32 | 1.5.33 | 1.5.34 | 1.5.35 | 1.5.36 | 1.5.37 | 1.5.38 | 1.5.39 | 1.5.50 | 1.5.51 | 1.5.52 | 1.5.53 | 1.5.54 | 1.5.55 | 1.5.56 | 1.5.57 | 1.5.58 | 1.5.59 | 1.5.60 | 1.5.61 | 1.5.62 | 1.5.63 | 1.5.64 | 1.5.65 | 1.5.66 | 1.5.67 | 1.5.68 | 1.5.69 | 1.5.70 | 1.5.71 | 1.5.72 | 1.5.73 | 1.5.74 | 1.5.75 | 1.5.76 | 1.5.77 | 1.5.78 | 1.6.0
2 vendors · 2 products
References
8 links- www.mandriva.com/security/advisories?name=MDVSA-2014:244Vendor AdvisoryX Refsource MANDRIVABroken Link