Back to Database
Status published
High
CVE-2019-18601
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to...
Vulnerability Description
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Debug RPC calls to crash a database server within the SVOTE_Debug RPC handler.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18601
Credits & Attribution
No credits recorded in the NVD database.
References
More from openafs
View All →CVE-2019-18603
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to...
Medium
5.9
CVE-2019-18602
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to...
High
7.5
CVE-2018-16949
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x...
High
7.5
CVE-2018-16948
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x...
High
7.5
CVE-2018-16947
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x...
Critical
9.8
Affected Vendor
openafs
View all reports →Affected Software
openafs
Vulnerable Versions:
0, 1.8.0
Timeline
Official Publish:
October 29th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.