CVE-2015-0283

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
redhatslapi-nis
𝑥
≤ 0.54.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
slapi-nis
bullseye
0.56.5-2
fixed
bookworm
0.60.0-1
fixed
sid
0.60.0-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
slapi-nis
cosmic
not-affected
bionic
not-affected
artful
ignored
zesty
ignored
yakkety
ignored
xenial
not-affected
wily
ignored
vivid
ignored
utopic
dne
trusty
dne
precise
dne
lucid
dne
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html
http://rhn.redhat.com/errata/RHSA-2015-0728.html
http://www.securityfocus.com/bid/73377
https://bugzilla.redhat.com/show_bug.cgi?id=1195729
https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html
http://rhn.redhat.com/errata/RHSA-2015-0728.html
http://www.securityfocus.com/bid/73377
https://bugzilla.redhat.com/show_bug.cgi?id=1195729
https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097