Afs3-fileserver Exploit -

afs3-prserver handling the protection database (users and groups).

💣 The exploit lives in Rx (AFS’s custom RPC protocol) . By sending a specially crafted FetchData RPC request with a manipulated “length” field, an unauthenticated attacker triggers an integer underflow → heap overflow → RCE. No credentials required. Just a packet. afs3-fileserver exploit

In some variations, this flaw can leak contents of the process heap to the network 2. Malformed ACL Crash & Leak (OPENAFS-SA-2024-002) afs3-fileserver exploit