CVE-2015-3285 Memory corruption in n/a
Local attackers can cause a kernel panic and denial of service in OpenAFS via a crafted OSD FS command due to memory corruption.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-3285?
CVE-2015-3285 is a low-severity memory corruption vulnerability in n/a, published on 12 Aug 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
Weakness: CWE-119
Which versions are affected by CVE-2015-3285?
It affects 1 product.
Products include Openafs Openafs.
How do I fix CVE-2015-3285?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2015-3285 being exploited?
There is no known exploitation of CVE-2015-3285 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2015-3285, GHSA-792x-qvrg-32mw, UBUNTU-CVE-2015-3285.