Back to Database
Status published
Medium
CVE-2015-7762
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does...
Vulnerability Description
rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-7762
Credits & Attribution
No credits recorded in the NVD database.
References
More from openafs
View All →CVE-2019-18603
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to...
Medium
5.9
CVE-2019-18602
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to...
High
7.5
CVE-2019-18601
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to...
High
7.5
CVE-2018-16949
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x...
High
7.5
CVE-2018-16948
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x...
High
7.5
Affected Vendor
openafs
View all reports →Affected Software
openafs, debian linux
Vulnerable Versions:
0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.8, 1.7.10, 1.7.11, 1.7.12, 1.7.13, 1.7.14, 1.7.15, 1.7.16, 1.7.17, 1.7.18, 1.7.19, 1.7.20, 1.7.21, 1.7.22, 1.7.23, 1.7.24, 1.7.25, 1.7.26, 1.7.27, 1.7.28, 1.7.29, 1.7.30, 1.7.31, 7.0, 8.0
Timeline
Official Publish:
November 6th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.