PT-2017-6823 · Red Hat+2 · Freeipa+2

Alich · Published 2017-09-20 · Updated 2017-12-06 · CVE-2015-5179

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FreeIPA (affected versions not specified)

Description The issue might cause FreeIPA to display user data improperly. This could occur through vectors involving non-printable characters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-2751

CVE-2015-5179

Affected Products

Alt Linux

Debian

Freeipa

References · 15

• 🔥 https://pagure.io/freeipa/issue/5153 · Exploit
• https://security-tracker.debian.org/tracker/source-package/freeipa · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2017-2751 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5179 · Security Note
• https://ubuntu.com/security/CVE-2015-5179 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-5179 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-5179 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5179 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-5179 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5179 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5179 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1252567 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2015-5179 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5179 · Note
• https://packages.debian.org/src:freeipa · Note