{"id":"CVE-2015-6587","aliases":["DEBIAN-CVE-2015-6587","DLA-342-1","DSA-3320-1","EUVD-2015-6525","GHSA-2rmv-q4gp-w43q","MGASA-2015-0337","UBUNTU-CVE-2015-6587"],"status":"published","title":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of...","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01933,"percentile":0.80179,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2015-07-30T00:00:00Z","modified":"2026-09-09T06:47:32Z","fixes":[{"ecosystem":"Debian:12","package":"openafs","fixed_in":["1.6.13-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openafs","fixed_in":["1.6.13-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openafs","fixed_in":["1.6.7-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.13-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.13-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.12.1+dfsg-4+squeeze4"}]}],"versions":["1.4.12.1+dfsg-3","1.4.12.1+dfsg-4","1.4.12.1+dfsg-4+squeeze1","1.4.12.1+dfsg-4+squeeze2","1.4.12.1+dfsg-4+squeeze3","1.4.12.1+dfsg-4~bpo50+1"],"bundled":6},{"source":"osv","ecosystem":"Debian:7","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-3+deb7u3"}]}],"versions":["1.6.1-3","1.6.1-3+deb7u1","1.6.1-3+deb7u1~bpo60+1","1.6.1-3+deb7u2","1.6.1-3+deb7u2~bpo60+1"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.9-2+deb8u3"}]}],"versions":["1.6.9-2+deb8u2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.13-1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.13-1.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openafs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-1ubuntu1.1"}]}],"versions":["1.6.5-1ubuntu3","1.6.5.1-1","1.6.5.1-1ubuntu1","1.6.6~pre2-1","1.6.6-1","1.6.7-1","1.6.7-1ubuntu1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openafs","product":"openafs"}],"references":[{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2015-006.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3320","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6587"},{"url":"https://github.com/advisories/GHSA-2rmv-q4gp-w43q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-6587","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0337.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16515","tags":["report"]},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txt","tags":["web"]},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2015-002.txt","tags":["web"]},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2015-003.txt","tags":["web"]},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txt","tags":["web"]},{"url":"http://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13","tags":["web"]},{"url":"http://www.openafs.org/pipermail/openafs-announce/2015/000486.html","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2015/09/02/2","tags":["web"]},{"url":"https://www.debian.org/security/2015/dsa-3320","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-6587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6587","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-6587","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2015-09-02T10:00:00Z","modified":"2024-08-06T07:22:22.44Z","updated_at":"2026-11-02T14:35:42.680858Z"}],"euvd":[{"id":"EUVD-2015-6525","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2015-09-02T10:00:00Z","modified":"2024-08-06T07:22:22Z","updated_at":"2026-11-03T02:21:55.290228Z"}],"ghsa":[{"id":"GHSA-2rmv-q4gp-w43q","title":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of...","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2022-05-17T04:08:30Z","modified":"2023-01-28T05:01:11Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:29.911539Z"}],"nvd":[{"id":"CVE-2015-6587","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2015-09-02T10:59:00.25Z","modified":"2026-06-17T00:31:05.947Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:08.998581Z"}],"osv":[{"id":"CVE-2015-6587","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2015-09-02T10:59:00Z","modified":"2026-04-16T06:24:21.795087909Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-6587","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2015-09-02T10:59:00.25Z","modified":"2026-09-09T06:47:32.63374246Z","updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"DLA-342-1","title":"openafs - security update","status":"published","published":"2015-11-17T00:00:00Z","modified":"2026-03-09T01:23:01.110889Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-3320-1","title":"openafs - security update","status":"published","published":"2015-07-30T00:00:00Z","modified":"2026-03-09T01:20:27.500378Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0337","title":"Updated openafs package fixes security vulnerabilities","description":"Updated openafs packages fix security vulnerabilities:\n\nMemory allocated by vos for VLDB entry structures was not cleared prior to\nuse, meaning stack data could be sent over the network, possibly in the clear\nif crypt mode was not in use (CVE-2015-3282).\n\nThe default use by bos of clear rather than crypt mode can allow spoofing\ncommands, including some which modify server state if restricted mode was not\nenabled (CVE-2015-3283).\n\nA local user executing commands which make pioctl calls to the kernel will\nhave some contents of kernel memory leaked when buffers used are larger than\ndata being returned (CVE-2015-3284).\n\nA local user executing the OSD FS command pioctl can trigger a panic due to\nan incorrect buffer being used for return status of the command\n(CVE-2015-3285).\n\nThe vlserver allows pattern matching on volume names via regular expressions\nwhen listing attributes. Because the regular expression is not checked for\nsituations which can overflow the buffers used, an attack is possible which\nreads arbitrary memory beyond the end of the buffer and can act on it as part\nof the expression evaluation, potentially crashing the process\n(CVE-2015-6587).\n","status":"published","published":"2015-09-08T07:20:40Z","modified":"2026-04-16T06:23:05.31268092Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"UBUNTU-CVE-2015-6587","description":"The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.","status":"published","published":"2015-09-02T10:59:00Z","modified":"2026-04-22T10:16:34.66013Z","updated_at":"2026-11-02T15:54:10.385269Z"}]}}