Vulnerability in Standards Based Linux Instrumentation Sblim-Sfcb

CVE-2015-5185

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet.

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.

Affected products

Standards_based_linux_instrumentation Sblim-sfcb — versions 1.3.4, 1.3.18
Opensuse — versions 13.1, 13.2
N/a — versions n/a

References

secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)