CVE-2015-3285: Buffer Overflow
Published Aug 12, 2015
·Updated
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
Affected Software
1 affected component
OpenAFS OpenAFS<=1.6.12
Event History
Aug 12, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3285?
CVE-2015-3285 has a severity rating that indicates it can cause a denial of service due to memory corruption and kernel panic.
2
How do I fix CVE-2015-3285?
To fix CVE-2015-3285, upgrade OpenAFS to version 1.6.13 or later.
3
Who is affected by CVE-2015-3285?
CVE-2015-3285 affects users of OpenAFS versions prior to 1.6.13.
4
What type of vulnerability is CVE-2015-3285?
CVE-2015-3285 is a local denial of service vulnerability.
5
Can CVE-2015-3285 be exploited remotely?
CVE-2015-3285 cannot be exploited remotely as it requires local user access to trigger the vulnerability.