Bug 1426744

Summary:	mod_auth_mellon: Badly formed logout message causes null pointer dereference
Product:	[Other] Security Response	Reporter:	Adam Mariš <amaris>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	jdennis, ssorce
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	mod_auth_mellon 0.13.0	Doc Type:	If docs needed, set a value
Doc Text:	A NULL pointer dereference flaw was found in the way mod_auth_mellon handled logout messages. A remote attacker could potentially use this flaw to crash mod_auth_mellon by sending a specially crafted logout message.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-07-24 06:44:04 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1426747
Bug Blocks:	1426746

Description Adam Mariš 2017-02-24 18:04:08 UTC

It was reported that badly formed logout message can cause segmentation fault due to dereferencing null pointer in mod_auth_mellon.

Upstream patch:

https://github.com/UNINETT/mod_auth_mellon/commit/6bdda9170a8f1757dabc5b109958657417728018

Comment 1 Adam Mariš 2017-02-24 18:07:18 UTC

CVE has been requested via DWF.

Comment 2 Adam Mariš 2017-02-24 18:08:45 UTC

Created mod_auth_mellon tracking bugs for this issue:

Affects: fedora-all [bug 1426747]

Comment 3 Dhiru Kholia 2017-07-24 06:39:19 UTC

Statement:

Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.