Scientific Linux Security Update : libldb on SL6.x, SL7.x i386/x86_64 (20160107)

A denial of service flaw was found in the ldbwildcardcompare function of libldb. A remote attacker could send a specially crafted packet that, when processed by an application using libldb for example the AD LDAP server in Samba, would cause that application to consume an excessive amount of memo...

libldb: remote memory read in the Samba LDAP server

A memory-read flaw was found in the way the libldb library processed LDB DN records with a null byte. An authenticated, remote attacker could use this flaw to read heap-memory pages from the server...

SUSE SLED12 / SLES12 Security Update : gnutls (SUSE-SU-2015:1518-1)

gnutls was updated to fix several security vulnerabilities. - fix double free in certificate DN decoding GNUTLS-SA-2015-3bsc941794,CVE-2015-6251 - fix invalid read in octet string in bundled libtasn1 bsc929414,CVE-2015-3622 - fix ServerKeyExchange signature issue GNUTLS-SA-2015-2bsc929690 Note th...

Ubuntu 15.04 : gnutls28 vulnerabilities (USN-2727-1)

It was discovered that GnuTLS incorrectly handled parsing CRL distribution points. A remote attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. CVE-2015-3308 Kurt Roeckx discovered that GnuTLS incorrectly handled a long DistinguishedName DN entry in a...

GnuTLS double free

Double free on DN parsing...

gnutls -- double free in certificate DN decoding

gnutls.org reports: Kurt Roeckx reported that decoding a specific certificate with very long DistinguishedName DN entries leads to double free, which may result to a denial of service. Since the DN decoding occurs in almost all applications using certificates it is recommended to upgrade the late...

Updated libksba packages fix security vulnerabilities

The libksba package has been updated to version 1.3.3, which fixes an integer overflow in the DN decoder and a couple of other minor bugs...

PT-2015-7896

Name of the Vulnerable Software and Affected Versions libksba versions prior to 1.3.3 Description The issue concerns an integer overflow in the DN decoder, along with a few other minor bugs. Recommendations For versions prior to 1.3.3, update to version 1.3.3 to resolve the issue...

libksba -- local denial of service vulnerabilities

Martin Prpic, Red Hat Product Security Team, reports: Denial of Service due to stack overflow in src/ber-decoder.c. Integer overflow in the BER decoder src/ber-decoder.c. Integer overflow in the DN decoder src/dn.c...

PT-2014-1413

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.32 PHP versions 5.5.x prior to 5.5.16 Description The issue is related to multiple buffer overflows in the php parserr function, which can be exploited by remote DNS servers using crafted DNS records. This can lead to...

PT-2020-7650

Name of the Vulnerable Software and Affected Versions musl libc versions 0.9.13 through 1.0.3 musl libc versions 1.1.x before 1.1.2 Description The issue is related to multiple stack-based buffer overflows in the dn expand function, which can be triggered by an invalid name length in a DNS...

gnutls: gnutls_x509_dn_oid_name NULL pointer dereference

The gnutlsx509dnoidname function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN...

PT-2014-1914

Name of the Vulnerable Software and Affected Versions strongSwan versions prior to 5.1.2 strongSwan versions prior to 5.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and IKE daemon crash, via a crafted ID DER ASN1 DN ID...

PT-2014-3311

Name of the Vulnerable Software and Affected Versions web2ldap versions 1.1.x through 1.1.48 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to displaying group DN and entry data in the group administratio...

PT-2013-5941

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.3.3 through 5.1.1 Description The issue allows remote attackers to cause a denial of service, including out-of-bounds read, NULL pointer dereference, and daemon crash, or remote authenticated users to impersonate arbitrar...

CVE-2013-4283

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...

Fedora 18 : 389-ds-base-1.3.0.8-1.fc18 (2013-15518)

In this version, a security bug -- modifying an entry specified by an invalid DN crashed the server -- was fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 18 : mingw-gnutls-2.12.23-1.fc18 (2013-3453)

Version 2.12.23 released 2012-02-04 - libgnutls: Eliminated memory leak in PCKS 11 initialization. Report and fix by Sam Varshavchik. - libgnutls: Fixes in record padding parsing to prevent a timing attack. Issue reported by Kenny Patterson and Nadhem Alfardan. - libgnutls: DN variable 'T' was...

DEBIAN-CVE-2012-4450

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry...

CVE-2012-4450: Undefined Security Weakness

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry...