QwikSec

Security Database

CVE

CWE

Training

CVE-2015-2675

Published: Aug 18, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://git.gnome.org/browse/librest/commit/?id=b50ace7738ea03817acdad87fb2b338a86018329

x_refsource_CONFIRM

https://bugzilla.gnome.org/show_bug.cgi?id=742644

x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=1199049

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

https://bugzilla.redhat.com/show_bug.cgi?id=1183982

x_refsource_CONFIRM

[oss-security] 20150323 Re: CVE request: Invalid pointer dereference in the GNOME librest library

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.