CVE-2016-4536

The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic.

• CWE-200

• https://lists.openafs.org/pipermail/openafs-announce/2016/000496.htmlVendor Advisory
• https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17Vendor Advisory
• https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txtVendor Advisory
• https://lists.openafs.org/pipermail/openafs-announce/2016/000496.htmlVendor Advisory
• https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17Vendor Advisory
• https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txtVendor Advisory

Published

May 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4530OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allo…6.5
• CVE-2016-4531Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 …
• CVE-2016-4532Directory traversal vulnerability in the WAP interface in Tr…
• CVE-2016-4533Heap-based buffer overflow in WECON LeviStudio allows remote…7.8
• CVE-2016-4534The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusS…
• CVE-2016-4535Integer signedness error in the AV engine before DAT 8145, a…
• CVE-2016-4537The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5…
• CVE-2016-4538The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5…
• CVE-2016-4539The xml_parse_into_struct function in ext/xml/xml.c in PHP b…
• CVE-2016-4540The grapheme_stripos function in ext/intl/grapheme/grapheme_…
• CVE-2016-4541The grapheme_strpos function in ext/intl/grapheme/grapheme_s…
• CVE-2016-4542The exif_process_IFD_TAG function in ext/exif/exif.c in PHP …