Red Hat Security AdvisoryRHSA-2015:2237
rest security update
Released 2015-11-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) rest-0.7.92-3.el7
- Red Hat Enterprise Linux Client Optional (v. 7) rest-devel-0.7.92-3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) rest-0.7.92-3.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) rest-devel-0.7.92-3.el7
- Red Hat Enterprise Linux Server (v. 7) rest-0.7.92-3.el7, rest-0.7.92-3.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) rest-devel-0.7.92-3.el7, rest-devel-0.7.92-3.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) rest-0.7.92-3.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) rest-devel-0.7.92-3.el7
Fixes 1 record
Priority LOW 39
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via run…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03468 · Published 2017-08-18 · Fixed CWE-119
