CVE-2017-17432

Priority
Description
OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which
allows remote attackers to cause a denial of service (system crash or
application crash) via crafted fields, as demonstrated by an integer
underflow and assertion failure for a small MTU value.
References
Bugs
Notes
Package
Upstream:released (1.6.22-1)
Ubuntu 18.04 LTS:not-affected (1.8.0~pre5-1)
Ubuntu 20.04 LTS:not-affected (1.8.0~pre5-1)
Ubuntu 21.10:not-affected (1.8.0~pre5-1)
Ubuntu 22.04 LTS:not-affected (1.8.0~pre5-1)
Ubuntu 14.04 ESM:DNE (trusty was needed)
Patches:
More Information

Updated: 2022-04-25 00:19:55 UTC (commit ecc1009cb19540b950de59270950018900f37f15)