Launchpad.net

CVE 2015-3282

vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.

CVE-2015-3282 (Candidate) is related to these bugs:

Bug #1481373: Security bugs "DSA-3320-1 openafs -- security update"

Summary				In	Importance	Status
	1481373	Security bugs "DSA-3320-1 openafs -- security update"		openafs (Ubuntu)	Medium	Fix Released

Bug #1513461: OPENAFS-SA-2015-007 "Tattletale"

		In	Importance	Status
1513461	OPENAFS-SA-2015-007 "Tattletale"	openafs (Ubuntu)	High	Fix Released
1513461	OPENAFS-SA-2015-007 "Tattletale"	openafs (Ubuntu Wily)	Undecided	Confirmed
1513461	OPENAFS-SA-2015-007 "Tattletale"	openafs (Ubuntu Trusty)	Undecided	Fix Released
1513461	OPENAFS-SA-2015-007 "Tattletale"	openafs (Ubuntu Xenial)	High	Fix Released
1513461	OPENAFS-SA-2015-007 "Tattletale"	openafs (Ubuntu Precise)	Undecided	Fix Released
1513461	OPENAFS-SA-2015-007 "Tattletale"	openafs (Ubuntu Vivid)	Undecided	Confirmed

See the

CVE page on Mitre.org for more details.