CVE-2009-1250 json
The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows rem…
published 2009-04-09 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1249
- cvss
- 7.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.0%
- EPSS 4.0% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.
Patch / fix
- openafs Debian 13, Debian 12 1.4.10+dfsg1-1
debian advisories DEBIAN-CVE-2009-1250
Exploit prediction
3.98% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- openafs.org http://www.openafs.org/security/openafs-sa-2009-002.patch referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-189 Numeric Errors
References
-
openafs.org
/security/openafs-sa-2009-002.patch
exploit
-
mandriva.com
/security/advisories?name=MDVSA-2009:099
vendor-advisory
-
debian.org
/security/2009/dsa-1768
vendor-advisory
-
www-1.ibm.com
/support/docview.wss?uid=swg1ID71123
vendor-advisory
-
security.gentoo.org
/glsa/glsa-201101-05.xml
vendor-advisory
-
vupen.com
/english/advisories/2011/0117
vdb-entry
- openafs.org /security/OPENAFS-SA-2009-002.txt
-
vupen.com
/english/advisories/2009/0984
vdb-entry
-
securityfocus.com
/bid/34404
vdb-entry
-
secunia.com
/advisories/36310
third-party-advisory
-
secunia.com
/advisories/34655
third-party-advisory
- www-01.ibm.com /support/docview.wss?uid=swg21396389
-
secunia.com
/advisories/34684
third-party-advisory
-
secunia.com
/advisories/42896
third-party-advisory
Sources
- CVE List CVE-2009-1250
- NVD CVE-2009-1250
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.