Candidate: CVE-2015-1783
PublicDate: 2017-08-11 21:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1783
Description:
 The prefix variable in the get_or_define_ns function in Lasso before commit
 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a
 denial of service (uninitialized memory access and application crash) via
 unspecified vectors.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]

Patches_lasso:
 upstream: https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cdd
upstream_lasso: released (2.4.1-1)
lucid_lasso: ignored (reached end-of-life)
precise_lasso: ignored (reached end-of-life)
precise/esm_lasso: DNE (precise was needed)
trusty_lasso: ignored (reached end-of-life)
trusty/esm_lasso: DNE (trusty was needed)
utopic_lasso: ignored (reached end-of-life)
vivid_lasso: not-affected (2.4.1-1build1)
vivid/stable-phone-overlay_lasso: DNE
vivid/ubuntu-core_lasso: DNE
wily_lasso: not-affected (2.4.1-1build1)
xenial_lasso: not-affected (2.4.1-1build1)
yakkety_lasso: not-affected (2.4.1-1build1)
zesty_lasso: not-affected (2.4.1-1build1)
artful_lasso: not-affected (2.4.1-1build1)
bionic_lasso: not-affected (2.4.1-1build1)
cosmic_lasso: not-affected (2.4.1-1build1)
disco_lasso: not-affected (2.4.1-1build1)
devel_lasso: not-affected (2.4.1-1build1)