CVE-2015-6587 | BDVDB-2026-71432 Detail

Description#

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openafs.org/pages/security/OPENAFS-SA-2015-006.txt
https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
http://www.debian.org/security/2015/dsa-3320
https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html

Exploit#

No public exploit known

History#

Version 12015-09-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.