Lucene search
Gentoo FoundationMGASA-2015-0148HistoryApr 15, 2015 - 12:01 p.m.
Updated shibboleth-sp packages fix CVE-2015-2684
2015-04-1512:01:28
Gentoo Foundation
advisories.mageia.org
16
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
EPSS
0.004
Percentile
74.2%
Updated shibboleth-sp package fixes security vulnerability: A denial of service vulnerability was found in the Shibboleth Service Provider. When processing certain malformed SAML message generated by an authenticated attacker, the daemon could crash (CVE-2015-2684).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | shibboleth-sp | < 2.5.3-1.1 | shibboleth-sp-2.5.3-1.1.mga4 |
Related
kaspersky
kaspersky
KLA10521 Denial of service vulnerability in Shibboleth SP
2015-03-31 00:00:00
prion
prion
Code injection
2015-03-31 14:59:00
nessus
nessus
Debian DSA-3207-1 : shibboleth-sp2 - security update
2015-03-30 00:00:00
FreeBSD : shibboleth-sp -- DoS vulnerability (b202e4ce-3114-11e5-aa32-0026551a22dc)
2015-07-27 00:00:00
Debian DLA-259-1 : shibboleth-sp2 security update
2015-06-30 00:00:00
securityvulns
securityvulns
Shibboleth Service Provider DoS
2015-04-19 00:00:00
[SECURITY] [DSA 3207-1] shibboleth-sp2 security update
2015-04-19 00:00:00
debian
debian
[SECURITY] [DSA 3207-1] shibboleth-sp2 security update
2015-03-28 13:16:06
[SECURITY] [DLA 259-1] shibboleth-sp2 security update
2015-06-29 22:11:30
[BSA-103] Security Update for shibboleth-sp
2015-04-14 11:18:29
openvas
openvas
Debian: Security Advisory (DLA-259-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3207-1)
2015-03-27 00:00:00
Mageia: Security Advisory (MGASA-2015-0148)
2022-01-28 00:00:00
cve
cve
CVE-2015-2684
2015-03-31 14:59:09
nvd
nvd
CVE-2015-2684
2015-03-31 14:59:09
ubuntucve
ubuntucve
CVE-2015-2684
2015-03-31 00:00:00
cvelist
cvelist
CVE-2015-2684
2015-03-31 14:00:00
debiancve
debiancve
CVE-2015-2684
2015-03-31 14:59:00
freebsd
freebsd
shibboleth-sp -- DoS vulnerability
2015-07-21 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
EPSS
0.004
Percentile
74.2%
Related for MGASA-2015-0148