Vulnerability Details CVE-2007-6599
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.0%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2007-6599
-
cpe:2.3:a:openafs:openafs:1.3.50
-
cpe:2.3:a:openafs:openafs:1.3.51
-
cpe:2.3:a:openafs:openafs:1.3.52
-
cpe:2.3:a:openafs:openafs:1.3.60
-
cpe:2.3:a:openafs:openafs:1.3.61
-
cpe:2.3:a:openafs:openafs:1.3.62
-
cpe:2.3:a:openafs:openafs:1.3.63
-
cpe:2.3:a:openafs:openafs:1.3.64
-
cpe:2.3:a:openafs:openafs:1.3.65
-
cpe:2.3:a:openafs:openafs:1.3.66
-
cpe:2.3:a:openafs:openafs:1.3.70
-
cpe:2.3:a:openafs:openafs:1.3.71
-
cpe:2.3:a:openafs:openafs:1.3.72
-
cpe:2.3:a:openafs:openafs:1.3.73
-
cpe:2.3:a:openafs:openafs:1.3.74
-
cpe:2.3:a:openafs:openafs:1.3.75
-
cpe:2.3:a:openafs:openafs:1.3.76
-
cpe:2.3:a:openafs:openafs:1.3.77
-
cpe:2.3:a:openafs:openafs:1.3.78
-
cpe:2.3:a:openafs:openafs:1.3.79
-
cpe:2.3:a:openafs:openafs:1.3.80
-
cpe:2.3:a:openafs:openafs:1.3.81
-
cpe:2.3:a:openafs:openafs:1.3.82
-
cpe:2.3:a:openafs:openafs:1.3.83
-
cpe:2.3:a:openafs:openafs:1.3.84
-
cpe:2.3:a:openafs:openafs:1.3.85
-
cpe:2.3:a:openafs:openafs:1.3.86
-
cpe:2.3:a:openafs:openafs:1.3.87
-
cpe:2.3:a:openafs:openafs:1.4
-
cpe:2.3:a:openafs:openafs:1.4.0
-
cpe:2.3:a:openafs:openafs:1.4.1
-
cpe:2.3:a:openafs:openafs:1.4.2
-
cpe:2.3:a:openafs:openafs:1.4.3
-
cpe:2.3:a:openafs:openafs:1.4.4
-
cpe:2.3:a:openafs:openafs:1.4.5
-
cpe:2.3:a:openafs:openafs:1.5.0
-
cpe:2.3:a:openafs:openafs:1.5.1
-
cpe:2.3:a:openafs:openafs:1.5.10
-
cpe:2.3:a:openafs:openafs:1.5.11
-
cpe:2.3:a:openafs:openafs:1.5.12
-
cpe:2.3:a:openafs:openafs:1.5.13
-
cpe:2.3:a:openafs:openafs:1.5.14
-
cpe:2.3:a:openafs:openafs:1.5.15
-
cpe:2.3:a:openafs:openafs:1.5.16
-
cpe:2.3:a:openafs:openafs:1.5.17
-
cpe:2.3:a:openafs:openafs:1.5.18
-
cpe:2.3:a:openafs:openafs:1.5.19
-
cpe:2.3:a:openafs:openafs:1.5.2
-
cpe:2.3:a:openafs:openafs:1.5.20
-
cpe:2.3:a:openafs:openafs:1.5.21
-
cpe:2.3:a:openafs:openafs:1.5.22
-
cpe:2.3:a:openafs:openafs:1.5.23
-
cpe:2.3:a:openafs:openafs:1.5.24
-
cpe:2.3:a:openafs:openafs:1.5.25
-
cpe:2.3:a:openafs:openafs:1.5.26
-
cpe:2.3:a:openafs:openafs:1.5.27
-
cpe:2.3:a:openafs:openafs:1.5.3
-
cpe:2.3:a:openafs:openafs:1.5.5
-
cpe:2.3:a:openafs:openafs:1.5.6
-
cpe:2.3:a:openafs:openafs:1.5.7
-
cpe:2.3:a:openafs:openafs:1.5.8
-
cpe:2.3:a:openafs:openafs:1.5.9
-
cpe:2.3:o:debian:debian_linux:3.1
-
cpe:2.3:o:debian:debian_linux:4.0