CVE-2015-2675 Null dereference in n/a
Remote attackers can crash applications using librest by triggering a null pointer dereference in the OAuth implementation via the EnsureCredentials method.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-2675?
CVE-2015-2675 is a high-severity vulnerability in n/a, published on 18 Aug 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.
Weakness: CWE-119
Which versions are affected by CVE-2015-2675?
It affects 1 product.
Linux distribution packages (12)
rest Red Hat:enterprise_linux:7::client | All versions | 0:0.7.92-3.el7 |
rest-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:0.7.92-3.el7 |
rest-devel Red Hat:enterprise_linux:7::client | All versions | 0:0.7.92-3.el7 |
rest Red Hat:enterprise_linux:7::computenode | All versions | 0:0.7.92-3.el7 |
rest-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:0.7.92-3.el7 |
rest-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:0.7.92-3.el7 |
rest Red Hat:enterprise_linux:7::server | All versions | 0:0.7.92-3.el7 |
rest-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:0.7.92-3.el7 |
rest-devel Red Hat:enterprise_linux:7::server | All versions | 0:0.7.92-3.el7 |
rest Red Hat:enterprise_linux:7::workstation | All versions | 0:0.7.92-3.el7 |
rest-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:0.7.92-3.el7 |
rest-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:0.7.92-3.el7 |
Products include Gnome Librest.
How do I fix CVE-2015-2675?
Upgrade to a fixed version.
Is CVE-2015-2675 being exploited?
There is no known exploitation of CVE-2015-2675 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2015-2675, GHSA-4rgr-65fh-c67c, RHSA-2015:2237.