Description
Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock) or possibly have other unspecified impact via a large group list when joining a PAG.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033262
Vendor Advisory x_refsource_confirm
http://www.openafs.org/pages/security/OPENAFS-SA-2015-005.txt
Various Sources x_refsource_confirm
https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
Vendor Advisory mailing-list
x_refsource_mlist
https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
Scores
EPSS
0.0040
EPSS Percentile
32.1%
Details
CWE
CWE-119
Status
published
Products (1)
openafs/openafs
< 1.6.12
Published
Aug 12, 2015
Tracked Since
Feb 18, 2026