CVE-2009-1251

no score yetEPSS 6.4%

No CVSS score yet. EPSS 6.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.

EPSS: 6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2009-04-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

openafs:openafs
unix:unix

References

http://secunia.com/advisories/34655
http://secunia.com/advisories/34684
http://secunia.com/advisories/42896
http://security.gentoo.org/glsa/glsa-201101-05.xml
http://www.debian.org/security/2009/dsa-1768

Check your stack JSON