CVE-2009-1250

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

• ibm afs (<= 3.6) • ibm afs 3.6 • openafs openafs 1.0 • openafs openafs 1.0.1 • openafs openafs 1.0.2 • openafs openafs 1.0.3 • openafs openafs 1.0.4 • openafs openafs 1.0.4a • openafs openafs 1.1 • openafs openafs 1.1.0 • openafs openafs 1.1.1 • openafs openafs 1.1.1a • openafs openafs 1.2 • openafs openafs 1.2.1 • openafs openafs 1.2.2 • openafs openafs 1.2.2a • openafs openafs 1.2.2b • openafs openafs 1.2.3 • openafs openafs 1.2.4 • openafs openafs 1.2.5 • openafs openafs 1.2.6 • openafs openafs 1.2.7 • openafs openafs 1.2.8 • openafs openafs 1.2.9 • openafs openafs 1.2.10 • openafs openafs 1.2.11 • openafs openafs 1.2.13 • openafs openafs 1.3 • openafs openafs 1.3.1 • openafs openafs 1.3.2 • openafs openafs 1.3.5 • openafs openafs 1.3.70 • openafs openafs 1.3.74 • openafs openafs 1.3.77 • openafs openafs 1.3.81 • openafs openafs 1.4 • openafs openafs 1.4.0 • openafs openafs 1.4.3 • openafs openafs 1.4.4 • openafs openafs 1.4.5 • openafs openafs 1.4.6 • openafs openafs 1.4.7 • openafs openafs 1.4.7 pre1 • openafs openafs 1.4.7 pre2 • openafs openafs 1.4.7 pre3 • openafs openafs 1.4.7 pre4 • openafs openafs 1.4.7 pre5 • openafs openafs 1.4.8 • openafs openafs 1.4.8 pre1 • openafs openafs 1.4.8 pre2 • openafs openafs 1.4.8 pre3 • openafs openafs 1.5 • openafs openafs 1.5.16 • openafs openafs 1.5.17 • openafs openafs 1.5.26 • openafs openafs 1.5.27 • openafs openafs 1.5.30 • openafs openafs 1.5.31 • openafs openafs 1.5.32 • openafs openafs 1.5.33 … and 13 more