CVE-2015-8312 Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.
HighCVSS 7.8
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openafs(Debian:12) | < 1.6.17-1 | 1.6.17-1 |
| debian/openafs(Debian:13) | < 1.6.17-1 | 1.6.17-1 |
| openafs | <= 1.6.15 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-8312 vendor-advisory
- git.openafs.org
- DSA-3569 third-party-advisory vendor-advisory
- www.openafs.org vendor-advisory