Lucene search

K
redhatcveRedhat.comRH:CVE-2017-15132
HistoryJan 25, 2018 - 4:19 p.m.

CVE-2017-15132

2018-01-2516:19:51
redhat.com
access.redhat.com
10

0.009 Low

EPSS

Percentile

82.6%

Aborting the process of SASL authentication can lead to a memory leak when the same login processes are reused. An attacker could use this flaw to cause a denial of service due to memory exhaustion.

Mitigation

This issue can be mitigated on vulnerable systems by limiting the login process to a single request per process, which is also the default value.