CVE-2015-2675

High

Published: 18/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The OAuth implementation in librest before version 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, allowing remote attackers to cause application crashes by running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

Risk Assessment

This vulnerability may lead to application crashes, affecting service availability for users. Attackers could exploit this flaw to disrupt application functionality.

Recommendation

It is recommended to update librest to version 0.7.93 or later to mitigate this vulnerability. Additionally, monitor application logs for potential attack attempts.

Other vulnerabilities in librest

CVE-2026-16615Medium
In librest, the PKCE implementation uses the cryptographically insecure GRand function from GLib, allowing an attacker to reverse-engineer the PRNG seed and bypass PKCE protections.

Original NVD description (English source)

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS