CVE-2013-1795 Integer overflow in n/a

What is CVE-2013-1795?

CVE-2013-1795 is a medium-severity vulnerability in n/a, published on 12 Mar 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.

Weakness: CWE-189

Which versions are affected by CVE-2013-1795?

It affects 1 product.

Products include Openafs Openafs.

How do I fix CVE-2013-1795?

Upgrade to a fixed version.

Is CVE-2013-1795 being exploited?

There is no known exploitation of CVE-2013-1795 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2009-1251 Memory corruption in n/a Critical 10.0
• CVE-2024-10394 Theft of credentials in Unix client PAGs High 8.4
• CVE-2024-10397 Preallocated buffer overflows in XDR responses High 7.7
• CVE-2019-18601 Denial of service in n/a High 7.5
• CVE-2011-0430 Use after free in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2013-1795, GHSA-8r2p-hx5x-8fj7.