PT-2015-5469 · Not Specified · Unzoo

William Robinet · Published 2015-05-19 · Updated 2016-08-02 · CVE-2015-1846

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions unzoo (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and resource consumption. This is related to pointer handling in the (1) ExtrArch or (2) ListArch function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-1846

Affected Products

Unzoo

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-1846 · Security Note
• http://openwall.com/lists/oss-security/2015/04/01/5 · Note
• http://securityfocus.com/bid/73686 · Note
• http://securitytracker.com/id/1032011 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1207647 · Note