CVE-2015-5185

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote...

5.0 MediumFix available

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet.

Exploit likelihood

3.36%Up 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2015-5185
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-5185
Updated: 2026-11-02

EUVDEUVD-2015-5186 No score

Record: EUVD-2015-5186
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h74p-5crf-72xc No score

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote...

Record: GHSA-h74p-5crf-72xc
Updated: 2026-11-02

OSVSUSE-SU-2015:2116-1 No score

Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders() (CVE-2015-5185).

Record: SUSE-SU-2015:2116-1
Updated: 2026-11-02

OSVSUSE-SU-2015:2218-1 No score

Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders() (CVE-2015-5185).

Record: SUSE-SU-2015:2218-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-5185 No score

Record: UBUNTU-CVE-2015-5185
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`sblim-sfcb` SUSE:Linux Enterprise Desktop 12	before 1.4.8-5.3.3	1.4.8-5.3.3
`sblim-sfcb` SUSE:Linux Enterprise Server 12	before 1.4.8-5.3.3	1.4.8-5.3.3
`sblim-sfcb` SUSE:Linux Enterprise Server for SAP Applications 12	before 1.4.8-5.3.3	1.4.8-5.3.3
`sblim-sfcb` SUSE:Linux Enterprise Desktop 11 SP3	before 1.3.11-0.25.4	1.3.11-0.25.4
`sblim-sfcb` SUSE:Linux Enterprise Desktop 11 SP4	before 1.3.11-0.25.4	1.3.11-0.25.4
`sblim-sfcb` SUSE:Linux Enterprise Server 11 SP3	before 1.3.11-0.25.4	1.3.11-0.25.4
`sblim-sfcb` SUSE:Linux Enterprise Server 11 SP3-TERADATA	before 1.3.11-0.25.4	1.3.11-0.25.4
`sblim-sfcb` SUSE:Linux Enterprise Server for SAP Applications 11 SP3	before 1.3.11-0.25.4	1.3.11-0.25.4
`sblim-sfcb` SUSE:Linux Enterprise Server 11 SP4	before 1.3.11-0.25.4	1.3.11-0.25.4
`sblim-sfcb` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 1.3.11-0.25.4	1.3.11-0.25.4

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5185 is a medium vulnerability (CVSS 5.0) in Standards Based Linux Instrumentation Sblim-sfcb, published September 28, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.36%, the 88th percentile. Fixed in sblim-sfcb 1.4.8-5.3.3.

References

Show 8 moreShow less