This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2015-2675 →

DEBIAN-CVE-2015-2675

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows rem...

Original description

The description as published by the source.

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 librest

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.92-3"}]}]

Debian:13 librest

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.92-3"}]}]

Debian:14 librest

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.92-3"}]}]

References

advisory security-tracker.debian.org