Multiple vulnerabilities have been found in OpenAFS, worst of which can allow attackers to execute arbitrary code
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-fs/openafs | * | < 1.6.5 | >= 1.6.5 |
OpenAFS is an client-server program suite for federated file sharing and replicated content distribution.
Multiple vulnerabilities have been discovered in OpenAFS. Please review the CVE identifiers referenced below for details.
An attacker could potentially execute arbitrary code with the permissions of the user running the AFS server, cause a Denial of Service condition, or gain access to sensitive information. Additionally, an attacker could compromise a cell’s private key, allowing them to impersonate any user in the cell.
There is no known workaround at this time.
All OpenAFS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/openafs-1.6.5"
The cache manager of OpenAFS contains several bugs resulting in remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-fs/openafs | * | < 1.4.9 | >= 1.4.9 |
OpenAFS is a distributed file system.
Two vulnerabilities were discovered:
The vulnerabilities might allow remote unauthenticated attackers to cause a Denial of Service (system crash) and possibly execute arbitrary code.
There is no known workaround at this time.
All OpenAFS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/openafs-1.4.9"
A Denial of Service vulnerability has been discovered in OpenAFS.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-fs/openafs | * | < 1.4.6 | >= 1.4.6 |
OpenAFS is a distributed network filesystem.
Russ Allbery, Jeffrey Altman, Dan Hyde and Thomas Mueller discovered a race condition due to an improper handling of the clients callbacks lists.
A remote attacker could construct cases which trigger the race condition, resulting in a server crash.
There is no known workaround at this time.
All OpenAFS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/openafs-1.4.6"
OpenAFS is subject to a design flaw that could allow privilege escalation on the client.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-fs/openafs | * | < 1.4.4 | >= 1.4.4 |
OpenAFS is a distributed network filesystem.
Benjamin Bennett discovered that the OpenAFS client contains a design flaw where cache managers do not use authenticated server connections when performing actions not requested by a user.
If setuid is enabled on the client cells, an attacker can supply a fake FetchStatus reply that sets setuid and root ownership of a file being executed. This could provide root access on the client. Remote attacks may be possible if an attacker can entice a user to execute a known file. Note that setuid is enabled by default in versions of OpenAFS prior to 1.4.4.
Disable the setuid functionality on all client cells. This is now the default configuration in OpenAFS.
All OpenAFS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/openafs-1.4.4"