CVE-2013-1795: Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (...

Security readout for executives and security teams

CVE-2013-1795 is a remote denial-of-service flaw in OpenAFS ptserver before 1.6.2. A specially large IdToName RPC list can crash the service. For organizations still running old OpenAFS infrastructure, the business impact is service disruption rather than confirmed data theft or active compromise. Exposure is most likely in legacy OpenAFS deployments running ptserver versions before 1.6.2, especially where the service is reachable by untrusted networks. The structured affected-product fields are incomplete, so confirm exposure from installed OpenAFS package versions and service inventory. Prioritize if OpenAFS supports business-critical authentication, file service, or research infrastructure. The known impact is availability loss, not confirmed compromise, but a remote crash in a central service can still create operational disruption. Mitigation focus: Upgrade OpenAFS ptserver to 1.6.2 or later where applicable.; Apply distribution vendor security updates for OpenAFS packages.; Restrict ptserver reachability to trusted administrative and client networks..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.