CVE-2015-0283

EPSS 1.8%
Veröffentlicht 30.03.2015 14:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Slapi-nis Version <= 0.54.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.8%	0.82

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html

http://rhn.redhat.com/errata/RHSA-2015-0728.html

http://www.securityfocus.com/bid/73377

https://bugzilla.redhat.com/show_bug.cgi?id=1195729

https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097

https://nvd.nist.gov/vuln/detail/CVE-2015-0283

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0283

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0283

EUVD