CVE-2015-4411: fedoraproject fedora Uncontrolled Resource Consumption

EPSS trend

Probability

6.37%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.37% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (sakurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (homakov.blogspot.ru)
Maturity: unknown

References

19 links

sakurity.com/blog/2015/06/04/mongo_ruby_regexp.htmlX Refsource MISCExploitThird Party AdvisoryWEB
homakov.blogspot.ru/2012/05/saferweb-injects-in-various-ruby.htmlX Refsource MISCExploitThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2015-July/161987.htmlX Refsource MISCMailing ListThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2015-July/161964.htmlX Refsource MISCMailing ListThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2015/06/06/3X Refsource MISCMailing ListThird Party AdvisoryWEB
www.securityfocus.com/bid/75045X Refsource MISCThird Party AdvisoryVDB Entry
github.com/mongoid/moped/commit/dd5a7c14b5d2e466f7875d079af71ad19774609bX Refsource MISCPatchWEB
bugzilla.redhat.com/show_bug.cgi?id=1229706X Refsource MISCIssue TrackingThird Party AdvisoryWEB
github.com/mongodb/bson-ruby/commit/fef6f75413511d653c76bf924a932374a183a24fX Refsource MISCPatchWEB
github.com/mongodb/…X Refsource MISCPatchWEB

Show all 19 references

seclists.org/oss-sec/2015/q2/653X Refsource MISCMailing ListThird Party AdvisoryWEB
github.com/mongodb/bson-ruby/commit/976da329ff03ecdfca3030eb6efe3c85e6db9999X Refsource MISCPatchWEB
www.securityfocus.com/bid/75045X Refsource MISCThird Party AdvisoryVDB Entry
security-tracker.debian.org/tracker/CVE-2015-4411X Refsource MISCThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2015-4411Advisory
github.com/advisories/GHSA-qh4w-7pw3-p4rpAdvisory
github.com/mongodb/bson-rubyPACKAGE
github.com/rubysec/ruby-advisory-db/blob/master/gems/bson/CVE-2015-4411.ymlWEB
web.archive.org/web/20200228085849/http://www.securityfocus.com/bid/75045WEB

Related vulnerabilities

CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-7262fedoraprojectfedora+282.87%8y ago19-03-2018 21:00In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2018-10196canonicalubuntu_linux+241.66%8y ago30-05-2018 21:00NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.CVE-2018-6003alpinelibtasn1+92.83%8y ago22-01-2018 20:00An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.

All vulnerabilities infedora bson

CVE-2015-4411: fedoraproject fedora Uncontrolled Resource Consumption

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References