[Bug 1124102] VUL-0: CVE-2015-6587: openafs: vlserver allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.

http://bugzilla.opensuse.org/show_bug.cgi?id=1124102 http://bugzilla.opensuse.org/show_bug.cgi?id=1124102#c1 Christof Hanke <christof.hanke@mpcdf.mpg.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com Flags| |needinfo?(meissner@suse.com | |) --- Comment #1 from Christof Hanke <christof.hanke@mpcdf.mpg.de> --- Hi, I don't understand this bug. Is it somehow still valid? It is reported more than 3 years ago. We have the version 1.6.23 and 1.8.2 which are way beyond the required minimum version of 1.6.13. Many thanks, Christof -- You are receiving this mail because: You are on the CC list for the bug.