NetSight
IP …
high7.5

CVE-2017-15134

A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search…

Impact

A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

Affected products

VendorProductAffected versions
Fedoraproject389 Directory Server
from 1.3.6.1 before 1.3.6.13
from 1.3.7.1 before 1.3.7.9
from 1.4.0.0 before 1.4.0.5
RedhatEnterprise Linux
Version 7.4
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Versions 7.0, 7.4
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-120CWE-119

References