CVE-2016-15024 json
doomsider shadow denial of service
published 2023-02-19 3 y ago modified 2026-06-17 4 mo ago also EUVD-2016-2092
- cvss
- 2.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 10%
- public exploits
- 0
- none known
Summary
A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as 3332c5ba9ec3014ddc74e2147190a050eee97bc0. It is recommended to apply a patch to fix this issue. VDB-221478 is the identifier assigned to this vulnerability.
Patch / fix
Exploit prediction
0.20% chance of exploitation in the next 30 days, higher than 10% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 2.5 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L |
| CNA | 3.0 | 2.5 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L |
| CNA | 2.0 | 1.0 | AV:L/AC:H/Au:S/C:N/I:N/A:P |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- doomsider shadow
Classification
- Weakness
-
- CWE-404 Improper Resource Shutdown or Release
References
-
github.com
/doomsider/shadow/commit/3332c5ba9ec3014ddc74e2147190a050eee97bc0
patch
-
vuldb.com
/?id.221478
vdb-entry, technical-description, third-party-advisory
-
vuldb.com
/?ctiid.221478
signature, permissions-required, third-party-advisory
Sources
- CVE List CVE-2016-15024
- NVD CVE-2016-15024
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.