CVE

Id
83194  
CVE No.
CVE-2015-5917  
Status
Candidate  
Description
The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the {..,..,..}/* substring.  
Phase
Assigned (20150806)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
743287 83194 CVE-2015-5917 MISC:https://cxsecurity.com/issue/WLB-2013040082  View
743288 83194 CVE-2015-5917 MISC:https://www.youtube.com/watch?v=MBK4QYkUm10  View
743289 83194 CVE-2015-5917 CONFIRM:https://support.apple.com/HT205267  View
743290 83194 CVE-2015-5917 APPLE:APPLE-SA-2015-09-30-3  View
743291 83194 CVE-2015-5917 URL:http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html  View
743292 83194 CVE-2015-5917 BID:76908  View
743293 83194 CVE-2015-5917 URL:http://www.securityfocus.com/bid/76908  View
743294 83194 CVE-2015-5917 SECTRACK:1033703  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11727 JVNDB-2015-007047 openSUSE および SUSE Linux Enterprise の MySQL Community Server パッケージおよび MariaDB パッケージにおけるデータベースの認証情報を取得される脆弱性 openSUSE、Leap の MySQL Community Server パッケージ、および openSUSE、Leap、SUSE Linux Enterprise の MariaDB パッケージに含まれる mysql-systemd-helper スクリプトには、データベースの認証情報を取得される脆弱性が存在します。 CVE-2015-5969 83194 2.1 6.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007047.html  View