Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-04-27T03:33:47

Updated: 2024-08-03T23:10:30.613Z

Reserved: 2021-04-27T00:00:00

Link: CVE-2021-31826

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-04-27T04:15:08.550

Modified: 2024-11-21T06:06:18.140

Link: CVE-2021-31826

cve-icon Redhat

No data.