Description
The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet.
References (6)
Core 6
Core References
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172667.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172634.html
Exploit mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/08/21/2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/91212
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-09/msg00019.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172659.html
Scores
EPSS
0.0118
EPSS Percentile
79.0%
Details
Status
published
Products (4)
opensuse/opensuse
13.1
opensuse/opensuse
13.2
standards_based_linux_instrumentation/sblim-sfcb
1.3.4
standards_based_linux_instrumentation/sblim-sfcb
1.3.18
Published
Sep 28, 2015
Tracked Since
Feb 18, 2026