Red Hat Security AdvisoryRHSA-2008:0583
openldap security update
Released 2008-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.27_2.2.29-8.el5_2.4, compat-openldap-2.3.27_2.2.29-8.el5_2.4.i386, compat-openldap-2.3.27_2.2.29-8.el5_2.4.ia64 +21
- Red Hat Enterprise Linux AS version 4 compat-openldap-2.1.30-8.el4_6.5, compat-openldap-2.1.30-8.el4_6.5.i386, compat-openldap-2.1.30-8.el4_6.5.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.27_2.2.29-8.el5_2.4, compat-openldap-2.3.27_2.2.29-8.el5_2.4.i386, openldap-2.3.27-8.el5_2.4 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.27-8.el5_2.4, openldap-devel-2.3.27-8.el5_2.4, openldap-devel-2.3.27-8.el5_2.4.i386 +4
- Red Hat Enterprise Linux Desktop version 4 compat-openldap-2.1.30-8.el4_6.5, compat-openldap-2.1.30-8.el4_6.5.i386, openldap-2.2.13-8.el4_6.5 +9
- Red Hat Enterprise Linux ES version 4 compat-openldap-2.1.30-8.el4_6.5, compat-openldap-2.1.30-8.el4_6.5.i386, compat-openldap-2.1.30-8.el4_6.5.ia64 +15
- Red Hat Enterprise Linux WS version 4 compat-openldap-2.1.30-8.el4_6.5, compat-openldap-2.1.30-8.el4_6.5.i386, compat-openldap-2.1.30-8.el4_6.5.ia64 +15
Fixes 1 record
Priority LOW 37
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13173 · Published 2008-07-01 · Fixed CWE-399
