CVE-2007-6599

no score yetEPSS 1.7%

Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2008-01-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
openafs:openafs

References

http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html
http://secunia.com/advisories/28327
http://secunia.com/advisories/28401
http://secunia.com/advisories/28433
http://secunia.com/advisories/28636

Check your stack JSON