CVE-2016-4536

MEDIUM · CVSS 5.3 EPSS 1.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-05-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-4536

Severity

MEDIUM

CVSS

5.3

EPSS

1.31%

Original Filing — NVD Description

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.