CVE-2015-3282

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2015/dsa-3320
http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txtVendor Advisory
http://www.securitytracker.com/id/1033262
https://lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlVendor Advisory
https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13Vendor Advisory
http://www.debian.org/security/2015/dsa-3320
http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txtVendor Advisory
http://www.securitytracker.com/id/1033262
https://lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlVendor Advisory
https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13Vendor Advisory

Timeline

Published: Aug 12, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-32836.8OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.CVE-2015-32842.1pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.CVE-2015-32852.1The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local us CVE-2015-32864.6Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock)CVE-2015-32887.8mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of se CVE-2015-32894.0OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly usin CVE-2015-32907.2arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing CVE-2015-32912.1arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is CVE-2015-329210.0The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) se CVE-2015-32934.0FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command.CVE-2015-32946.4The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remot CVE-2015-32955.3markdown-it before 4.1.0 does not block data: URLs.