CVE-2015-1827

The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
freeipafreeipa
𝑥
≤ 4.1.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freeipa
bookworm
4.9.11-1
fixed
sid
4.11.1-2.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freeipa
lucid
dne
precise
not-affected
trusty
not-affected
utopic
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
ipa-admintools
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-client
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-python
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-server
RHEL 7
0:4.1.0-18.el7_1.3
fixed
ipa-server-trust-ad
RHEL 7
0:4.1.0-18.el7_1.3
fixed
slapi-nis
RHEL 7
0:0.54-3.el7_1
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html
http://rhn.redhat.com/errata/RHSA-2015-0728.html
http://www.securityfocus.com/bid/73376
https://bugzilla.redhat.com/show_bug.cgi?id=1205200
https://fedorahosted.org/freeipa/ticket/4908
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html
http://rhn.redhat.com/errata/RHSA-2015-0728.html
http://www.securityfocus.com/bid/73376
https://bugzilla.redhat.com/show_bug.cgi?id=1205200
https://fedorahosted.org/freeipa/ticket/4908