2014-04-29
ALT-BU-2014-2742-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2015-10-29
Modified: 2025-04-12
Modified: 2025-04-12
CVE-2015-5292
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
Severity: MEDIUM (6.8)
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
References:
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169110.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169597.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169613.html
- http://permalink.gmane.org/gmane.linux.redhat.sssd.user/3422
- http://rhn.redhat.com/errata/RHSA-2015-2019.html
- http://rhn.redhat.com/errata/RHSA-2015-2355.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77529
- http://www.securitytracker.com/id/1034038
- https://bugzilla.redhat.com/show_bug.cgi?id=1267580
- https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch
- https://fedorahosted.org/sssd/ticket/2803
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169110.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169597.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169613.html
- http://permalink.gmane.org/gmane.linux.redhat.sssd.user/3422
- http://rhn.redhat.com/errata/RHSA-2015-2019.html
- http://rhn.redhat.com/errata/RHSA-2015-2355.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77529
- http://www.securitytracker.com/id/1034038
- https://bugzilla.redhat.com/show_bug.cgi?id=1267580
- https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch
- https://fedorahosted.org/sssd/ticket/2803
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
Closed bugs
Проблема при обновлении
Closed vulnerabilities
Published: 2014-02-04
Modified: 2025-04-11
Modified: 2025-04-11
CVE-2014-0019
Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.
Severity: LOW (1.9)
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
References:
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html
- http://osvdb.org/102612
- http://seclists.org/oss-sec/2014/q1/159
- http://www.dest-unreach.org/socat
- http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:033
- http://www.securityfocus.com/bid/65201
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html
- http://osvdb.org/102612
- http://seclists.org/oss-sec/2014/q1/159
- http://www.dest-unreach.org/socat
- http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:033
- http://www.securityfocus.com/bid/65201
Closed bugs
Добавление пакета для libunrar