CVE-2015-0283

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
redhatslapi-nis
𝑥
≤ 0.54.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
slapi-nis
bookworm
0.60.0-1
fixed
bullseye
0.56.5-2
fixed
sid
0.60.0-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
slapi-nis
artful
ignored
bionic
not-affected
cosmic
not-affected
lucid
dne
precise
dne
trusty
dne
utopic
dne
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
ignored
zesty
ignored
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
ipa-admintools
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-client
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-python
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-server
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-server-trust-ad
RHEL 7
0:4.1.0-18.el7_1.3
fixed
slapi-nis
RHEL 7
0:0.54-3.el7_1
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html
http://rhn.redhat.com/errata/RHSA-2015-0728.html
http://www.securityfocus.com/bid/73377
https://bugzilla.redhat.com/show_bug.cgi?id=1195729
https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html
http://rhn.redhat.com/errata/RHSA-2015-0728.html
http://www.securityfocus.com/bid/73377
https://bugzilla.redhat.com/show_bug.cgi?id=1195729
https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097