CVE-2013-1795
CVE-2013-1795 is a medium-severity vulnerability in Openafs with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-189.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 3% (87th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-189
- Affected product: Openafs
- Published:
- Last modified:
Description
Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Frequently asked questions
- What is CVE-2013-1795?
- Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
- How severe is CVE-2013-1795?
- CVE-2013-1795 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2013-1795 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2013-1795?
- CVE-2013-1795 primarily affects Openafs. In total, 61 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2013-1795?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2013-1795 published?
- CVE-2013-1795 was published on 2013-03-14 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/52342
- http://secunia.com/advisories/52480
- http://www.debian.org/security/2013/dsa-2638
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-002.txt
- http://www.securityfocus.com/bid/58300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82585
Affected products (61)
- cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.12:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.13:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.14:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.15:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.18:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.19:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.20:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.21:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.22:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.23:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.24:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.25:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.28:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.29:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.37:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.51:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*
More vulnerabilities in Openafs
- CVE-2009-1251 — Critical (CVSS 10.0): Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on…
- CVE-2018-16947 — Critical (CVSS 9.8): An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process…
- CVE-2024-10397 — High (CVSS 7.8): A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.
- CVE-2024-10394 — High (CVSS 7.8): A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing…
- CVE-2015-8312 — High (CVSS 7.8): Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory…
- CVE-2009-1250 — High (CVSS 7.8): The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19,…
Other CWE-189 (Numeric Errors) vulnerabilities
- CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
- CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
- CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
- CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
- CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
- CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…