{"id":"UBUNTU-CVE-2015-3248","details":"openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service (disk consumption).","modified":"2025-07-16T07:32:54.379965Z","published":"2017-09-26T15:29:00Z","withdrawn":"2025-07-18T16:43:12Z","upstream":["CVE-2015-3248"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2015-3248"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233520"},{"type":"REPORT","url":"http://openhpi.org/Changelogs/3.6.0"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2015-3248"}],"affected":[{"package":{"name":"openhpi","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/openhpi@3.8.0-2.1build5?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-2.1build5"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"3.8.0-2.1build5","binary_name":"libopenhpi-dev"},{"binary_name":"libopenhpi3","binary_version":"3.8.0-2.1build5"},{"binary_name":"libopenhpi3-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-clients","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-clients-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-dynamic-simulator","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-dynamic-simulator-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ilo2-ribcl","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ilo2-ribcl-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ipmi","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ipmi-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ipmidirect","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ipmidirect-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-oa-soap","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-oa-soap-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ov-rest","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-ov-rest-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-simulator","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-simulator-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-slave","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-slave-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_version":"3.8.0-2.1build5","binary_name":"openhpi-plugin-snmp-bc"},{"binary_name":"openhpi-plugin-snmp-bc-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-sysfs","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-sysfs-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-test-agent","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-test-agent-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-watchdog","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpi-plugin-watchdog-dbgsym","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpid","binary_version":"3.8.0-2.1build5"},{"binary_name":"openhpid-dbgsym","binary_version":"3.8.0-2.1build5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-3248.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"low"}]}