CVE-2013-1794 Memory corruption in n/a

Medium 6.5 Published 12 Mar 2013 Updated 6 Aug 2024

Remote authenticated users can trigger a buffer overflow in OpenAFS client utilities, causing a crash or potentially executing arbitrary code.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2013-1794?

CVE-2013-1794 is a medium-severity memory corruption vulnerability in n/a, published on 12 Mar 2013. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.

Weakness: CWE-119

Which versions are affected by CVE-2013-1794?

It affects 1 product.

Products include Openafs Openafs.

How do I fix CVE-2013-1794?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2013-1794 being exploited?

There is no known exploitation of CVE-2013-1794 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2013-1794, GHSA-gjvw-c69w-xg78.