CVE-2015-3282
OpenAFS < 1.6.13 - Exposure of Sensitive Information via VLDB Entry Update
Title source: llmDescription
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033262
Vendor Advisory x_refsource_confirm
https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
Vendor Advisory x_refsource_confirm
http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txt
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2015/dsa-3320
Vendor Advisory mailing-list
x_refsource_mlist
https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
Scores
EPSS
0.0188
EPSS Percentile
76.9%
Details
CWE
CWE-200
Status
published
Products (1)
openafs/openafs
< 1.6.12
Published
Aug 12, 2015
Tracked Since
Feb 18, 2026