Lucene search

K
redhatRedHatRHSA-2017:0893
HistoryApr 11, 2017 - 10:30 a.m.

(RHSA-2017:0893) Important: 389-ds-base security and bug fix update

2017-04-1110:30:44
access.redhat.com
32

0.006 Low

EPSS

Percentile

78.3%

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • An invalid pointer dereference flaw was found in the way 389-ds-base handled LDAP bind requests. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service. (CVE-2017-2668)

Red Hat would like to thank Joachim Jabs (F24) for reporting this issue.

Bug Fix(es):

  • Previously, the “deref” plug-in failed to dereference attributes that use distinguished name (DN) syntax, such as “uniqueMember”. With this patch, the “deref” plug-in can dereference such attributes and additionally “Name and Optional UID” syntax. As a result, the “deref” plug-in now supports any syntax. (BZ#1435365)