Read the docs
TI-2013-01581 Aliases CVE-2013-1795GHSA-8r2p-hx5x-8fj7

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a…

Priority LOW 29CWE-189Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-189 and the CVSS impact.

Summary

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.

Why it matters now

EPSS 0.03283 88th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 61

CPEVersionsRoleVendor
cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*up to 1.6.1VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.10:*:*:*:*:*:*:*1.5.10VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.11:*:*:*:*:*:*:*1.5.11VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.12:*:*:*:*:*:*:*1.5.12VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.13:*:*:*:*:*:*:*1.5.13VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.14:*:*:*:*:*:*:*1.5.14VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.15:*:*:*:*:*:*:*1.5.15VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*1.5.16VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*1.5.17VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.18:*:*:*:*:*:*:*1.5.18VulnerableThe OpenAFS Foundation
Show 51 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:openafs:openafs:1.5.19:*:*:*:*:*:*:*1.5.19VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.20:*:*:*:*:*:*:*1.5.20VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.21:*:*:*:*:*:*:*1.5.21VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.22:*:*:*:*:*:*:*1.5.22VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.23:*:*:*:*:*:*:*1.5.23VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.24:*:*:*:*:*:*:*1.5.24VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.25:*:*:*:*:*:*:*1.5.25VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*1.5.26VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*1.5.27VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.28:*:*:*:*:*:*:*1.5.28VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.29:*:*:*:*:*:*:*1.5.29VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*1.5.30VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*1.5.31VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*1.5.32VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*1.5.33VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*1.5.34VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*1.5.35VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*1.5.36VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.37:*:*:*:*:*:*:*1.5.37VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*1.5.38VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*1.5.39VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*1.5.50VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.51:*:*:*:*:*:*:*1.5.51VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*1.5.52VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*1.5.53VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*1.5.54VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*1.5.55VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*1.5.56VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*1.5.57VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*1.5.58VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.59:*:*:*:*:*:*:*1.5.59VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.60:*:*:*:*:*:*:*1.5.60VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.61:*:*:*:*:*:*:*1.5.61VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.62:*:*:*:*:*:*:*1.5.62VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.63:*:*:*:*:*:*:*1.5.63VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.64:*:*:*:*:*:*:*1.5.64VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.65:*:*:*:*:*:*:*1.5.65VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.66:*:*:*:*:*:*:*1.5.66VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.67:*:*:*:*:*:*:*1.5.67VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.68:*:*:*:*:*:*:*1.5.68VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.69:*:*:*:*:*:*:*1.5.69VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.70:*:*:*:*:*:*:*1.5.70VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.71:*:*:*:*:*:*:*1.5.71VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.72:*:*:*:*:*:*:*1.5.72VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.73:*:*:*:*:*:*:*1.5.73VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.74:*:*:*:*:*:*:*1.5.74VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.75:*:*:*:*:*:*:*1.5.75VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.76:*:*:*:*:*:*:*1.5.76VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.77:*:*:*:*:*:*:*1.5.77VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.5.78:*:*:*:*:*:*:*1.5.78VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableThe OpenAFS Foundation

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1795
  2. 2026-10-03 Alias added: GHSA-8r2p-hx5x-8fj7

References

Advisory 3

  • TI-2009-01186 Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through… CVSS 2.0HIGH 10.0
  • TI-2003-00025 Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR… CVSS 2.0HIGH 7.5
  • TI-2018-12102 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. CVSS 3.0CRITICAL 9.8
  • TI-2009-01185 The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58… CVSS 2.0HIGH 7.8
  • TI-2018-12104 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. CVSS 3.0HIGH 7.5
  • TI-2017-12736 OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote… CVSS 3.0HIGH 7.5
See all 35 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences