CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature

published April 27, 2021

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02000 · 80.6th percentile
Published
2021-04-27T03:33Z
EPSS history
Timeline
  • 27 APR 03:33Z
    Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature
    cvelistv5