CVE-2015-8312

Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2016-05-13

Last modified

2024-08-06

Weaknesses

CWE-189

Affected products

• Debian Linux (Debian)
• Openafs (Openafs)

References

• http://git.openafs.org/?p=openafs.git%3Ba=commitdiff%3Bh=2ef863720da4d9f368aaca0461c672a3008195ca
• http://www.debian.org/security/2016/dsa-3569
• https://www.openafs.org/dl/1.6.16/RELNOTES-1.6.16