CVE-2009-1250

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-09 · updated 2026-06-16
Weakness: CWE-189

Description

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

Affected products

IBM Afs: through 3.6; 3.6, 3.6-patch12, 3.6-patch13, 3.6-patch14, 3.6-patch15, 3.6-patch16
The OpenAFS Foundation OpenAFS: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.4a (+65)

References

http://secunia.com/advisories/34655
http://secunia.com/advisories/34684
http://secunia.com/advisories/36310
http://secunia.com/advisories/42896
http://security.gentoo.org/glsa/glsa-201101-05.xml
http://www-01.ibm.com/support/docview.wss?uid=swg21396389
http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123
http://www.debian.org/security/2009/dsa-1768
http://www.mandriva.com/security/advisories?name=MDVSA-2009:099
http://www.openafs.org/security/OPENAFS-SA-2009-002.txt
http://www.openafs.org/security/openafs-sa-2009-002.patch
http://www.securityfocus.com/bid/34404

Get alerted when CVE-2009-1250 or the next vulnerability affects your stack