Red Hat Security AdvisoryRHSA-2015:0728
ipa and slapi-nis security and bug fix update
Released 2015-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ipa-4.1.0-18.el7_1.3, ipa-client-4.1.0-18.el7_1.3, ipa-python-4.1.0-18.el7_1.3
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-admintools-4.1.0-18.el7_1.3, ipa-server-4.1.0-18.el7_1.3, ipa-server-trust-ad-4.1.0-18.el7_1.3 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.1.0-18.el7_1.3, ipa-client-4.1.0-18.el7_1.3, ipa-python-4.1.0-18.el7_1.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-admintools-4.1.0-18.el7_1.3, ipa-server-4.1.0-18.el7_1.3, ipa-server-trust-ad-4.1.0-18.el7_1.3 +1
- Red Hat Enterprise Linux Server (v. 7) ipa-4.1.0-18.ael7b_1.3, ipa-4.1.0-18.el7_1.3, ipa-admintools-4.1.0-18.ael7b_1.3 +9
- Red Hat Enterprise Linux Server Optional (v. 7) ipa-admintools-4.1.0-18.el7_1.3
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.1.0-18.el7_1.3, ipa-admintools-4.1.0-18.el7_1.3, ipa-client-4.1.0-18.el7_1.3 +4
Fixes 2 records
Priority MEDIUM 40
The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03123 · Published 2015-03-30 · Fixed CWE-399
Priority LOW 28
The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a gr…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02644 · Published 2015-03-30 · Fixed CWE-19
