[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2015:2237 -- centos 7 rest

ID: oval:org.secpod.oval:def:204266Date: (C)2017-04-04   (M)2023-02-20
Class: PATCHFamily: unix




The rest library was designed to make it easier to access web services that claim to be RESTful. A RESTful service should have URLs that represent remote objects, which methods can then be called on. It was found that the OAuth implementation in librest, a helper library for RESTful services, incorrectly truncated the pointer returned by the rest_proxy_call_get_url call. An attacker could use this flaw to crash an application using the librest library. All users of rest are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, all applications using librest must be restarted for the update to take effect.

Platform:
CentOS 7
Product:
rest
Reference:
CESA-2015:2237
CVE-2015-2675
CVE    1
CVE-2015-2675
CPE    2
cpe:/a:rubygems:rest
cpe:/o:centos:centos:7

© SecPod Technologies