CVE-2009-1250

no score yetEPSS 4.0%

No CVSS score yet. EPSS 4.0% chance of exploitation in the next 30 days.

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2009-04-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:afs
openafs:openafs

References

http://secunia.com/advisories/34655
http://secunia.com/advisories/34684
http://secunia.com/advisories/36310
http://secunia.com/advisories/42896
http://security.gentoo.org/glsa/glsa-201101-05.xml

Check your stack JSON