Shibboleth Service Provider
The issue involves a NULL pointer dereference flaw in the session recovery feature of the Shibboleth Service Provider. This flaw can be exploited to cause a daemon crash on systems not using the session recovery feature by supplying a crafted cookie. The exploitation of this flaw can allow a remote attacker to cause a denial of service.