This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-9772 →
DEBIAN-CVE-2016-9772
OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2)...
Original description
The description as published by the source.
OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
openafs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.20-1"}]}]
Debian:13
openafs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.20-1"}]}]
References
- advisory security-tracker.debian.org