{"id":"DEBIAN-CVE-2009-1250","details":"The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.","modified":"2026-09-11T06:47:30.040980208Z","published":"2009-04-09T00:30:00.313Z","upstream":["CVE-2009-1250"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2009-1250"}],"affected":[{"package":{"name":"openafs","ecosystem":"Debian:12","purl":"pkg:deb/debian/openafs?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10+dfsg1-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2009-1250.json"}},{"package":{"name":"openafs","ecosystem":"Debian:13","purl":"pkg:deb/debian/openafs?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10+dfsg1-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2009-1250.json"}}],"schema_version":"1.9.0"}