OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libafsauthent1",
"binary_version": "1.6.7-1"
},
{
"binary_name": "libafsrpc1",
"binary_version": "1.6.7-1"
},
{
"binary_name": "libkopenafs1",
"binary_version": "1.6.7-1"
},
{
"binary_name": "libopenafs-dev",
"binary_version": "1.6.7-1"
},
{
"binary_name": "libpam-openafs-kaserver",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-client",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-dbg",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-dbserver",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-doc",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-fileserver",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-fuse",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-kpasswd",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-krb5",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-modules-dkms",
"binary_version": "1.6.7-1"
},
{
"binary_name": "openafs-modules-source",
"binary_version": "1.6.7-1"
}
]
}