KLA10521 Denial of service vulnerability in Shibboleth SP

An unspecified vulnerability was found in Shibboleth SP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed SAML message.

Original advisories

Shibboleth advisory

Related products

Shibboleth-Service-Provider

CVE list

CVE-2015-2684 warning

Solution

Update to the latest version

Get Shibboleth SP

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Shibboleth Service Provider (SP) versions earlier than 2.5.4