Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-5292HistoryOct 29, 2015 - 4:59 p.m.
CVE-2015-5292
2015-10-2916:59:00
Debian Security Bug Tracker
security-tracker.debian.org
9
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
0.014 Low
EPSS
Percentile
86.8%
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sssd | < 1.13.1-1 | sssd_1.13.1-1_all.deb |
| Debian | 11 | all | sssd | < 1.13.1-1 | sssd_1.13.1-1_all.deb |
| Debian | 10 | all | sssd | < 1.13.1-1 | sssd_1.13.1-1_all.deb |
| Debian | 999 | all | sssd | < 1.13.1-1 | sssd_1.13.1-1_all.deb |
Related
nessus
nessus
Scientific Linux Security Update : sssd on SL7.x x86_64 (20151119)
2015-12-22 00:00:00
Scientific Linux Security Update : sssd on SL6.x i386/x86_64 (20151110)
2015-11-11 00:00:00
Amazon Linux AMI : sssd (ALAS-2016-635)
2016-01-19 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2015-2019)
2015-11-11 00:00:00
Oracle: Security Advisory (ELSA-2015-2355)
2015-11-25 00:00:00
Fedora Update for sssd FEDORA-2015-7
2015-10-21 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: sssd-1.13.1-2.fc22
2015-10-20 01:56:37
[SECURITY] Fedora 21 Update: sssd-1.12.5-4.fc21
2015-10-20 02:54:52
[SECURITY] Fedora 23 Update: sssd-1.13.1-2.fc23
2015-10-11 16:08:12
amazon
amazon
Low: sssd
2016-01-18 11:00:00
cve
cve
CVE-2015-5292
2015-10-29 16:59:00
oraclelinux
oraclelinux
sssd security and bug fix update
2015-11-10 00:00:00
sssd security, bug fix, and enhancement update
2015-11-24 00:00:00
redhat
redhat
(RHSA-2015:2019) Low: sssd security and bug fix update
2015-11-10 00:00:00
(RHSA-2015:2355) Low: sssd security, bug fix, and enhancement update
2015-11-19 13:37:40
f5
f5
K48523069 : System Security Services Daemon vulnerability CVE-2015-5292
2017-09-13 00:00:00
centos
centos
ubuntucve
ubuntucve
CVE-2015-5292
2015-10-29 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:08:22
cvelist
cvelist
CVE-2015-5292
2015-10-29 16:00:00
nvd
nvd
CVE-2015-5292
2015-10-29 16:59:00
prion
prion
Authentication flaw
2015-10-29 16:59:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
0.014 Low
EPSS
Percentile
86.8%
Related for DEBIANCVE:CVE-2015-5292