CVE-2015-1827

The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows…

published March 30, 2015

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02644 · 85.4th percentile
Published
2015-03-30T14:00Z
EPSS history
Timeline
  • 30 MAR 14:00Z
    The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows…
    cvelistv5