CVE-2015-8312

HIGH7.8EPSS 0.04%

openafs - security update

發布日:2016/5/13修改日:2026/3/9

也稱為:DSA-3569-1DEBIAN-CVE-2015-8312DLA-493-1

描述

Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.

受影響套件(3)

Debian/openafsfrom 0, < 1.6.17-1
Debian/openafsfrom 0, < 1.6.1-3+deb7u6
Debian/openafsfrom 0, < 1.6.9-2+deb8u5

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.8	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-8312