VulnerabilityModified
CVE-2015-3285
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
LOW 2.1EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- openafs/openafs
- Source
- secalert@redhat.com
References
- http://www.debian.org/security/2015/dsa-3320
- http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txtVendor Advisory
- http://www.securitytracker.com/id/1033262
- https://lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlVendor Advisory
- https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
- http://www.debian.org/security/2015/dsa-3320
- http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txtVendor Advisory
- http://www.securitytracker.com/id/1033262
- https://lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlVendor Advisory
- https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.