CVE-2015-1827: Fedoraproject Fedora

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups.

Affected products

• Fedoraproject Fedora: version 21 only; version 22 only
• Freeipa Freeipa: up to and including 4.1.3

Published 2015-03-30. Last modified 2026-06-17.