VulnerabilityModified
CVE-2015-5232
Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.
HIGH 8.1EPSS 1.68%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.68% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- cornelisnetworks/opa-ff · cornelisnetworks/opa-fm
- Source
- secalert@redhat.com
References
- http://www.openwall.com/lists/oss-security/2015/09/22/17Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1257098Issue Tracking, Third Party Advisory
- https://github.com/01org/opa-ff/commit/080ab97461d80a01636f77ba6aecc667c3c0087cPatch
- https://github.com/01org/opa-fm/commit/5f4087aabb5d03c42738b320af0fc60e9df4d1f7Patch
- https://github.com/01org/opa-fm/commit/c5759e7b76f5bf844be6c6641cc1b356bbc83869Patch
- http://www.openwall.com/lists/oss-security/2015/09/22/17Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1257098Issue Tracking, Third Party Advisory
- https://github.com/01org/opa-ff/commit/080ab97461d80a01636f77ba6aecc667c3c0087cPatch
- https://github.com/01org/opa-fm/commit/5f4087aabb5d03c42738b320af0fc60e9df4d1f7Patch
- https://github.com/01org/opa-fm/commit/c5759e7b76f5bf844be6c6641cc1b356bbc83869Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.