CVE-2019-18601

—

CVSS 3.1

7.5 high

EPSS

1%p71

Published

Oct 29, 2019 (Oct 29, 2019)

Modified

Jun 17, 2026

Description

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Debug RPC calls to crash a database server within the SVOTE_Debug RPC handler.

Vendors: openafs
Products: openafs
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.