CVE-2015-3284

pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.

• CWE-200

• http://www.debian.org/security/2015/dsa-3320
• http://www.openafs.org/pages/security/OPENAFS-SA-2015-003.txtVendor Advisory
• http://www.securitytracker.com/id/1033262
• https://lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlVendor Advisory
• https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13Vendor Advisory
• http://www.debian.org/security/2015/dsa-3320
• http://www.openafs.org/pages/security/OPENAFS-SA-2015-003.txtVendor Advisory
• http://www.securitytracker.com/id/1033262
• https://lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlVendor Advisory
• https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13Vendor Advisory

Published

Aug 12, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3278The cipherstring parsing code in nss_compat_ossl while in mu…
• CVE-2015-3279Integer overflow in filter/texttopdf.c in texttopdf in cups-…
• CVE-2015-3280OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x…
• CVE-2015-3281The buffer_slow_realign function in HAProxy 1.5.x before 1.5…
• CVE-2015-3282vos in OpenAFS before 1.6.13, when updating VLDB entries, al…
• CVE-2015-3283OpenAFS before 1.6.13 allows remote attackers to spoof bos c…
• CVE-2015-3285The pioctl for the OSD FS command in OpenAFS before 1.6.13 u…
• CVE-2015-3286Buffer overflow in the Solaris kernel extension in OpenAFS b…
• CVE-2015-3287Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-3288mm/memory.c in the Linux kernel before 4.1.4 mishandles anon…7.8
• CVE-2015-3289OpenStack Glance before 2015.1.1 (kilo) allows remote authen…
• CVE-2015-3290arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 o…