Unrated severityNVD Advisory· Published Sep 2, 2015· Updated Jun 17, 2026

CVE-2015-6587

Description

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openafs/Openafs2 versions
cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*range: <=1.6.12
- (no CPE)range: <1.6.13
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.openafs.org/pages/security/OPENAFS-SA-2015-006.txtnvdVendor Advisory
lists.openafs.org/pipermail/openafs-announce/2015/000486.htmlnvdVendor Advisory
www.debian.org/security/2015/dsa-3320nvd
www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000