medium5.9
CVE-2019-18603
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent …
Impact
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openafs | Openafs | before 1.6.24 from 1.8.0 before 1.8.5 |
| Debian | Debian Linux | Version 8.0 |