Asymmetric denial of service In 389-ds-base
Description
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 1.3.8.2-1 | ||
debian 12 | 1.3.8.2-1 | ||
debian 11 | 1.3.8.2-1 | ||
 rpm rhel7 | 0:1.3.7.5-21.el7_5 | ||
rpm rhel6 | 0:1.2.11.15-95.el6_9 |
Aliases
1. 2. 3. 4. 5.