OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.
The product uses or accesses a resource that has not been initialized.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openafs | Openafs | * | 1.6.24 (excluding) |
| Openafs | Openafs | 1.8.0 (including) | 1.8.5 (excluding) |