Unscored severity · published Aug 12, 2015
CVE-2015-3285
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openafs · Openafs
through 1.6.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3285
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3285
www.debian.org
http://www.debian.org/security/2015/dsa-3320
Vendor Advisory
http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txt
www.securitytracker.com
http://www.securitytracker.com/id/1033262
Vendor Advisory
https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
www.openafs.org
https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
More from Openafs
9.8
CVE-2018-16947
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2
7.8
CVE-2024-10397
A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code
7.8
CVE-2024-10394
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number,…
7.8
CVE-2015-8312
Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input…
7.5
CVE-2019-18602
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer