VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 30, 2015· Updated Jun 17, 2026

CVE-2015-1827

CVE-2015-1827

Description

The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Freeipa/Freeipainferred3 versions
    <4.1.4+ 2 more
    • (no CPE)range: <4.1.4
    • cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*range: <=4.1.3
    • (no CPE)range: <4.1.4
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.