CVE-2016-9772
Fixed in a distro release EPSS 2%
OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.
Products: openafs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openafs | 1.6.20-1 |
| Debian 13 | openafs | 1.6.20-1 |
| Debian 7 | openafs | 1.6.1-3+deb7u7 |
| Ubuntu 16.04 LTS | openafs | no fix |