CVE-2013-0288 nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup....
MediumCVSS 6.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nss-pam-ldapd(Debian:12) | < 0.8.10-3 | 0.8.10-3 |
| debian/nss-pam-ldapd(Debian:13) | < 0.8.10-3 | 0.8.10-3 |
| debian/nss-pam-ldapd(Debian:14) | < 0.8.10-3 | 0.8.10-3 |
| arthurdejong nss-pam-ldapd | = 0.8.0 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.1 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.2 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.3 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.4 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.5 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.6 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.7 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.8 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.9 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.8.10 | No fix listed |
| arthurdejong nss-pam-ldapd | <= 0.7.17 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.1 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.2 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.2.1 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.3 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.4 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.4.1 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.5 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.0 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.1 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| arthurdejong nss-pam-ldapd | = 0.6.2 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.3 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.4 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.5 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.6 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.7 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.7.1 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.7.2 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.8 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.9 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.10 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.11 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.6.12 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.0 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.1 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.2 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.3 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.4 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.5 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.6 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.7 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.8 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.9 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.10 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.11 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.12 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.13 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.14 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.15 | No fix listed |
| arthurdejong nss-pam-ldapd | = 0.7.16 | No fix listed |
References
- Debian Security Tracker CVE-2013-0288 vendor-advisory
- arthurdejong.org
- arthurdejong.org
- arthurdejong.org
- bugs.debian.org
- [nss-pam-ldapd-announce] 20130218 nss-pam-ldapd security advisory (CVE-2013-0288) mailing-list
- FEDORA-2013-2754 vendor-advisory
- openSUSE-SU-2013:0522 vendor-advisory
- openSUSE-SU-2013:0524 vendor-advisory
- RHSA-2013:0590 vendor-advisory
- 52212 third-party-advisory
- 52242 third-party-advisory vendor-advisory
- DSA-2628 vendor-advisory
- MDVSA-2013:106 vendor-advisory
- [oss-security] 20130218 CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow mailing-list
- 58007 vdb-entry
- bugzilla.redhat.com
- nsspamldapd-fdsetsize-bo(82175) vdb-entry
- wiki.mageia.org
- bugs.debian.org issue-tracking