CVE-2015-3248

MEDIUM 4.7CVE-2015-3248 · Published 26/09/2017 · updated 17/06/2026

In short

CVE-2015-3248 is a MEDIUM (CVSS 4.7) vulnerability affecting openhpi (openhpi).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openhpi openhpi	`≤ 3.5.0`	No fix yet

Description

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service (disk consumption).

References

lists.fedoraproject.org/pipermail/package-announce/2015-October/168841.html · Third Party Advisory
openhpi.org/Changelogs/3.6.0 · Release Notes
bugzilla.redhat.com/show_bug.cgi · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free