CVE-2015-3285

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.35%

Published

Aug 12, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.

Weaknesses (CWE)

CWE-119

Affected Products (1)

openafs · openafsvulnerable

References (10)

http://www.debian.org/security/2015/dsa-3320

http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txt

Vendor Advisory

http://www.securitytracker.com/id/1033262

https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html

Vendor Advisory

https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13

http://www.debian.org/security/2015/dsa-3320

http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txt

Vendor Advisory

http://www.securitytracker.com/id/1033262

https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html

Vendor Advisory

https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13

KEV Catalog EPSS Scores Vendors All CVEs