CVE-2015-6587
The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.
Date published : 2015-09-02
http://www.openafs.org/pages/security/OPENAFS-SA-2015-006.txt