CVE-2015-2684

Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

Score

CVSS 2.0 4.0 Medium

Status

Modified - security@debian.org

Published

2015-03-31

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Debian Linux (Debian)
• Service Provider (Shibboleth)

References

• http://www.debian.org/security/2015/dsa-3207
• http://www.securityfocus.com/bid/73314
• https://shibboleth.net/community/advisories/secadv_20150319.txt