CVE-2018-6644

CVE-2018-6644 affects SBLIM Small Footprint CIM Broker (SFCB) 1.4.9. A NULL pointer dereference can occur when handling crafted HTTP POST requests to the /cimom URI, causing DoS by crashing a sblim-sfcb child process. Documented risk is a remote, network-exposed issue with potential partial avail...

CVE-2018-6644: NULL Pointer Dereference

SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...

PT-2018-17693

Name of the Vulnerable Software and Affected Versions SBLIM Small Footprint CIM Broker SFCB version 1.4.9 Description The issue is related to a null pointer vulnerability that can cause a denial of service DoS via a crafted POST request to the "/cimom" API endpoint. Recommendations For SBLIM Smal...

SUSE SLES11 Security Update : sblim-sfcb (SUSE-SU-2017:1008-1)

This update for sblim-sfcb fixes the following issues: Feature enhancements : - A separate sblim-sfcb-openssl1 package was added to the SECURITY Module. fate322032/bsc1012814 This package can be installed additionally, and the SysV Init script will pick the openssl1 variant on the next start,...

SUSE-SU-2017:1008-1 Security update for sblim-sfcb

This update for sblim-sfcb fixes the following issues: Feature enhancements: - A seperate sblim-sfcb-openssl1 package was added to the SECURITY Module. fate322032/bsc1012814 This package can be installed additionaly, and the SysV Init script will pick the openssl1 variant on the next start,...

PT-2017-19385

Name of the Vulnerable Software and Affected Versions sblim-sfcb affected versions not specified Description The issue concerns the addition of a separate package, sblim-sfcb-openssl1, to the SECURITY Module, which offers TLS 1.2 support on the WBEM SSL socket. Bugfixes include adding sslNoSSLv3...

VMSA-2010-0020 : VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

a. ESXi 4.1 Update Installer SFCB Authentication Flaw Under certain conditions, the ESXi 4.1 installer that upgrades an ESXi 3.5 or ESXi 4.0 host to ESXi 4.1 incorrectly handles the SFCB authentication mode. The result is that SFCB authentication could allow login with any username and password...

SUSE SLED11 / SLES11 Security Update : sblim-sfcb (SUSE-SU-2015:2218-1)

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders CVE-2015-5185. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

SUSE-SU-2015:2218-1 Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders CVE-2015-5185...

SUSE SLED12 / SLES12 Security Update : sblim-sfcb (SUSE-SU-2015:2116-1)

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders CVE-2015-5185. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

SUSE-SU-2015:2116-1 Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders CVE-2015-5185...

Fedora 21 : sblim-sfcb-1.4.8-5.fc21 (2015-14200)

Fix possible NULL pointer dereference CVE-2015-5185 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for sblim-sfcb FEDORA-2015-14200

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for sblim-sfcb FEDORA-2015-14199

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : sblim-sfcb-1.4.9-4.fc23 (2015-14197)

Fix possible NULL pointer dereference CVE-2015-5185 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2015-5185

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty className in a packet...

CVE-2015-5185

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty className in a packet...

UBUNTU-CVE-2015-5185

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty className in a packet...

CVE-2015-5185

CVE-2015-5185 affects the SBLIM-SFCB component (sblim-sfcb). The root cause is a NULL pointer dereference in providerMgr.c when handling a packet with an empty className, allowing a remote attacker to cause a DoS (application crash). Affected products include IBM IMM2 ( IMM2 for System x, Flex, a...

CVE-2015-5185

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty className in a packet...