CVE-2015-2704 realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response.
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/realmd(Debian:12) | < 0.16.0-1 | 0.16.0-1 |
| debian/realmd(Debian:13) | < 0.16.0-1 | 0.16.0-1 |
| debian/realmd(Debian:14) | < 0.16.0-1 | 0.16.0-1 |
| realmd project realmd | <= 15.2 | No fix listed |
References
- Debian Security Tracker CVE-2015-2704 vendor-advisory
- FEDORA-2015-6124 vendor-advisory
- FEDORA-2015-6387 vendor-advisory
- www.oracle.com
- 73352 vdb-entry
- bugs.freedesktop.org vendor-advisory
- bugs.debian.org issue-tracking