Every CVESearch/Get API key

CVE-2015-0283

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user...

7.8 HighFix available

CVE-2015-0283 is a high vulnerability (CVSS 7.8) in Redhat Slapi-nis, published March 30, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 88th percentile. Fixed in slapi-nis 0.54.2-1.

What does this mean?
Severity
7.8 HighCVSS 2.0, NVD
Exploit chance
3.12%EPSS, 88th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.54.2-1slapi-nis +37 more

Description

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Exploit likelihood

3.12%Up 1.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
slapi-nis
Debian:12
before 0.54.2-1
0.54.2-1
slapi-nis
Debian:13
before 0.54.2-1
0.54.2-1
ipa
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-client
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-python
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-admintools
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server-trust-ad
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
slapi-nis
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:0.54-3.el7_1
0:0.54-3.el7_1
Show 28 moreShow less
Affected packages
PackageAffectedFixed
slapi-nis-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:0.54-3.el7_1
0:0.54-3.el7_1
ipa
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-client
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-python
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-admintools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server-trust-ad
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
slapi-nis
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:0.54-3.el7_1
0:0.54-3.el7_1
slapi-nis-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:0.54-3.el7_1
0:0.54-3.el7_1
ipa
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.ael7b_1.3
0:4.1.0-18.ael7b_1.3
ipa-admintools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-client
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.ael7b_1.3
0:4.1.0-18.ael7b_1.3
ipa-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-python
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.ael7b_1.3
0:4.1.0-18.ael7b_1.3
ipa-server
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server-trust-ad
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
slapi-nis
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:0.54-3.ael7b_1
0:0.54-3.ael7b_1
slapi-nis-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:0.54-3.ael7b_1
0:0.54-3.ael7b_1
ipa
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-admintools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-client
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-python
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
ipa-server-trust-ad
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.1.0-18.el7_1.3
0:4.1.0-18.el7_1.3
slapi-nis
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:0.54-3.el7_1
0:0.54-3.el7_1
slapi-nis-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:0.54-3.el7_1
0:0.54-3.el7_1

What each source reports

NVD Score used7.8

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
CVE-2015-0283
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
CVE-2015-0283
Updated
2026-11-02
EUVDEUVD-2015-0296No score

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
EUVD-2015-0296
Updated
2026-11-03
GitHub AdvisoriesGHSA-mh9j-g427-6h4wNo score

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user...

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
GHSA-mh9j-g427-6h4w
Updated
2026-11-02
OSVNo score

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
CVE-2015-0283
Updated
2026-11-02
OSVDEBIAN-CVE-2015-0283No score

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
DEBIAN-CVE-2015-0283
Updated
2026-11-02
OSVUBUNTU-CVE-2015-0283No score

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

Record
UBUNTU-CVE-2015-0283
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 17 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open