739 matches found
Command injection
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service memory corruption and kernel panic via a crafted OSD FS command...
CVE-2015-3282
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network...
CVE-2015-3285
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service memory corruption and kernel panic via a crafted OSD FS command...
UBUNTU-CVE-2015-3282
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network...
Code injection
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network...
CVE-2015-3286
Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service panic or deadlock or possibly have other unspecified impact via a large group list when joining a PAG...
CVE-2015-3284
pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands...
UBUNTU-CVE-2015-3284
pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands...
UBUNTU-CVE-2015-3285
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service memory corruption and kernel panic via a crafted OSD FS command...
CVE-2015-3285
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service memory corruption and kernel panic via a crafted OSD FS command...
CVE-2015-3286
Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service panic or deadlock or possibly have other unspecified impact via a large group list when joining a PAG...
CVE-2015-3286
OpenAFS on Solaris has a local-privilege impact due to a buffer overflow in the Solaris kernel extension prior to version 1.6.13. The issue occurs when joining a PAG with a large group list, potentially causing a denial of service (panic or deadlock) or other unspecified impact. Affected componen...
CVE-2015-3284
pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands...
CVE-2015-3283
OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors...
CVE-2015-3282
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network...
CVE-2015-3283
OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors...
CVE-2015-3282
OpenAFS vos vulnerability CVE-2015-3282 affects OpenAFS prior to 1.6.13; on VLDB entry updates, stack data can be leaked over the network. The issue is mitigated by upgrading to a newer OpenAFS release (e.g., 1.6.13+ per description) or distribution-specific advisories recommending updated OpenAF...
CVE-2015-3283
OpenAFS is affected by CVE-2015-3283: remote attackers can spoof bos commands via unspecified vectors in OpenAFS versions before 1.6.13. Debian/Mageia advisories and Debian OpenAFS bulletin list this alongside related CVEs (e.g., CVE-2015-3282, CVE-2015-3285, CVE-2015-6587) and recommend upgradin...
CVE-2015-3282
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network...
CVE-2015-3285
OpenAFS CVE-2015-3285 affects OpenAFS before 1.6.13. The pioctl handling of the OSD FS command uses the wrong pointer when writing RPC results, enabling a local attacker to trigger memory corruption and kernel panic via a crafted OSD FS command. Impact is local, with potential denial of service. ...