4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.94 High
EPSS
Percentile
98.7%
OpenLDAP is an open source suite of Lightweight Directory Access Protocol
(LDAP) applications and development tools. LDAP is a set of protocols used
to access and maintain distributed directory information services over an
IP network. The openldap package contains configuration files, libraries,
and documentation for OpenLDAP.
A denial of service flaw was found in the way the OpenLDAP server daemon
(slapd) performed reference counting when using the rwm (rewrite/remap)
overlay. A remote attacker able to query the OpenLDAP server could use this
flaw to crash the server by immediately unbinding from the server after
sending a search request. (CVE-2013-4449)
Red Hat would like to thank Michael Vishchers from Seven Principles AG for
reporting this issue.
All openldap users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 5 | ppc64 | openldap-devel | <Β 2.3.43-27.el5_10 | openldap-devel-2.3.43-27.el5_10.ppc64.rpm |
RedHat | 5 | s390x | openldap-servers-overlays | <Β 2.3.43-27.el5_10 | openldap-servers-overlays-2.3.43-27.el5_10.s390x.rpm |
RedHat | 5 | src | openldap | <Β 2.3.43-27.el5_10 | openldap-2.3.43-27.el5_10.src.rpm |
RedHat | 5 | ia64 | openldap | <Β 2.3.43-27.el5_10 | openldap-2.3.43-27.el5_10.ia64.rpm |
RedHat | 5 | ppc | openldap-debuginfo | <Β 2.3.43-27.el5_10 | openldap-debuginfo-2.3.43-27.el5_10.ppc.rpm |
RedHat | 5 | i386 | openldap-servers | <Β 2.3.43-27.el5_10 | openldap-servers-2.3.43-27.el5_10.i386.rpm |
RedHat | 5 | x86_64 | openldap-devel | <Β 2.3.43-27.el5_10 | openldap-devel-2.3.43-27.el5_10.x86_64.rpm |
RedHat | 5 | ia64 | openldap-debuginfo | <Β 2.3.43-27.el5_10 | openldap-debuginfo-2.3.43-27.el5_10.ia64.rpm |
RedHat | 5 | x86_64 | compat-openldap | <Β 2.3.43_2.2.29-27.el5_10 | compat-openldap-2.3.43_2.2.29-27.el5_10.x86_64.rpm |
RedHat | 5 | x86_64 | openldap-debuginfo | <Β 2.3.43-27.el5_10 | openldap-debuginfo-2.3.43-27.el5_10.x86_64.rpm |