CVE-2015-3248: Openhpi

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service (disk consumption).

Affected products

• Openhpi Openhpi: up to and including 3.5.0

Published 2017-09-26. Last modified 2026-06-17.