Denial of Service Vulnerability in OpenAFS vlserver

Denial of Service Vulnerability in OpenAFS vlserver

CVE-2015-6587 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:N/A:P

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.

Learn more about our Cis Benchmark Audit For Server Software.