Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:2218-1

Опубликовано: 07 дек. 2015
Источник: suse-cvrf

Описание

Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders() (CVE-2015-5185).

Список пакетов

SUSE Linux Enterprise Desktop 11 SP3
sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Desktop 11 SP4
sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server 11 SP3
sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server 11 SP3-TERADATA
sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server 11 SP4
sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server for SAP Applications 11 SP3
sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4
sblim-sfcb-1.3.11-0.25.4

Описание

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet.


Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Desktop 11 SP4:sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server 11 SP3-TERADATA:sblim-sfcb-1.3.11-0.25.4
SUSE Linux Enterprise Server 11 SP3:sblim-sfcb-1.3.11-0.25.4

Ссылки