Shibboleth Service Provider CVE-2015-2684 Denial of Service Vulnerability
BID:73314
Info
Shibboleth Service Provider CVE-2015-2684 Denial of Service Vulnerability
| Bugtraq ID: | 73314 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2015-2684 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 24 2015 12:00AM |
| Updated: | May 07 2015 05:21PM |
| Credit: | Brett Slaughter |
| Vulnerable: |
Shibboleth Service Provider 2.5.3 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Shibboleth Service Provider 2.5.4 |
Discussion
Shibboleth Service Provider CVE-2015-2684 Denial of Service Vulnerability
Shibboleth Service Provider is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Shibboleth Service Provider is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Exploit / POC
Shibboleth Service Provider CVE-2015-2684 Denial of Service Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Shibboleth Service Provider CVE-2015-2684 Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Shibboleth Service Provider CVE-2015-2684 Denial of Service Vulnerability
References:
References: