Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM OpenAFS 信息泄露漏洞
Vulnerability Description
OpenAFS是一套分布式文件系统，它允许系统之间通过局域网和广域网来分享档案和资源。 IBM OpenAFS的rx/rx.c文件中存在安全漏洞，该漏洞源于程序没有正确初始化Rx acknowledgement(ACK)数据包末尾的填充数据。远程攻击者可通过实施重放攻击或嗅探网络利用该漏洞获取敏感信息。以下版本受到影响：OpenAFS 1.5.75版本至1.5.78版本，1.6.15之前1.6.x版本，1.7.33之前1.7.x版本。
CVSS Information
N/A
Vulnerability Type
N/A