CVE-2015-8312

HIGH7.8EPSS 0.04%

openafs - security update

Published: 5/13/2016Modified: 3/9/2026

Also known as:DSA-3569-1DEBIAN-CVE-2015-8312DLA-493-1

Description

Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.

Affected packages (3)

Debian/openafsfrom 0, < 1.6.17-1
Debian/openafsfrom 0, < 1.6.1-3+deb7u6
Debian/openafsfrom 0, < 1.6.9-2+deb8u5

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.8	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-8312