rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-11-06T21:00:00
Updated: 2016-12-05T22:57:01
Reserved: 2015-10-08T00:00:00
Link: CVE-2015-7762
JSON object: View
NVD Information
Status : Modified
Published: 2015-11-06T21:59:09.017
Modified: 2016-12-07T18:25:09.770
Link: CVE-2015-7762
JSON object: View
Redhat Information
No data.
CWE