CVE-2015-1783

The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.

• CWE-119

• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154321.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154355.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155382.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1199925Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cddPatch, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154321.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154355.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155382.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1199925Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cddPatch, Third Party Advisory

Published

Aug 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1777rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-to…
• CVE-2015-1778The custom authentication realm used by karaf-tomcat's "open…
• CVE-2015-1779The VNC websocket frame decoder in QEMU allows remote attack…8.6
• CVE-2015-1780oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can a…6.5
• CVE-2015-1781Buffer overflow in the gethostbyname_r and other unspecified…
• CVE-2015-1782The kex_agree_methods function in libssh2 before 1.5.0 allow…
• CVE-2015-1784In nextgen-galery wordpress plugin before 2.0.77.3 there are…8.8
• CVE-2015-1785In nextgen-galery wordpress plugin before 2.0.77.3 there are…6.5
• CVE-2015-1786Cross-site request forgery (CSRF) vulnerability in Zend/Vali…
• CVE-2015-1787The ssl3_get_client_key_exchange function in s3_srvr.c in Op…
• CVE-2015-1788The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenS…
• CVE-2015-1789The X509_cmp_time function in crypto/x509/x509_vfy.c in Open…