CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-04-14

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Openafs (Openafs)

References

• http://www.debian.org/security/2014/dsa-2899
• http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog