CVE

Id
79104  
CVE No.
CVE-2015-1827  
Status
Candidate  
Description
The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups.  
Phase
Assigned (20150217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
720612 79104 CVE-2015-1827 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1205200  View
720613 79104 CVE-2015-1827 CONFIRM:https://fedorahosted.org/freeipa/ticket/4908  View
720614 79104 CVE-2015-1827 FEDORA:FEDORA-2015-4788  View
720615 79104 CVE-2015-1827 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html  View
720616 79104 CVE-2015-1827 FEDORA:FEDORA-2015-4747  View
720617 79104 CVE-2015-1827 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html  View
720618 79104 CVE-2015-1827 REDHAT:RHSA-2015:0728  View
720619 79104 CVE-2015-1827 URL:http://rhn.redhat.com/errata/RHSA-2015-0728.html  View
720620 79104 CVE-2015-1827 BID:73376  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6248 JVNDB-2015-001568 WordPress 用 Google Doc Embedder プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Google Doc Embedder プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-1879 79104 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001568.html  View