Bug 1199925 – CVE-2015-1783 lasso: use of uninitialized value leading to a crash

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1199925 - (CVE-2015-1783) CVE-2015-1783 lasso: use of uninitialized value leading to a crash

Summary:	CVE-2015-1783 lasso: use of uninitialized value leading to a crash

Status:	CLOSED WONTFIX

Aliases:	CVE-2015-1783

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20150309,repor...
Keywords:	Security

Depends On:	1200085
Blocks:	1199930
	Show dependency tree / graph

Reported:	2015-03-09 05:50 EDT by Martin Prpič
Modified:	2017-06-28 05:27 EDT (History)
CC List:	4 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-06-27 04:13:19 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
proposed patch for lasso (445 bytes, text/plain) 2015-03-09 12:32 EDT, Martin Prpič	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Martin Prpič 2015-03-09 05:50:03 EDT

An uninitialized data structure flaw was found in lasso, a library that implements SSO standards. A remote attacker could potentially use this flaw to crash an application using the lasso library.

The lasso library is used by ipsilon and mod_auth_mellon.

Acknowledgements:

This issue was discovered by Rob Crittenden of Red Hat.

Comment 1 Martin Prpič 2015-03-09 12:32:33 EDT

Created attachment 999630 [details]
proposed patch for lasso

Comment 2 Martin Prpič 2015-03-09 12:36:42 EDT

Created lasso tracking bugs for this issue:

Affects: fedora-all [bug 1200085]

Comment 4 Rob Crittenden 2015-03-10 12:21:21 EDT

Not sure how I didn't notice this before but this is already fixed upstream in master, https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cdd

Comment 5 Fedora Update System 2015-04-06 04:33:16 EDT

lasso-2.4.1-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 6 Fedora Update System 2015-04-06 04:36:23 EDT

lasso-2.4.1-1.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2015-04-21 15:07:12 EDT

lasso-2.4.1-3.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.

Note You need to log in before you can comment on or make changes to this bug.