Red Hat Security AdvisoryRHSA-2010:0542
openldap security update
Released 2010-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.43_2.2.29-12.el5_5.1, compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386, compat-openldap-2.3.43_2.2.29-12.el5_5.1.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.43_2.2.29-12.el5_5.1, compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386, openldap-2.3.43-12.el5_5.1 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.43-12.el5_5.1, openldap-devel-2.3.43-12.el5_5.1, openldap-devel-2.3.43-12.el5_5.1.i386 +6
Fixes 2 records
Priority HIGH 65
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and po…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.28472 · Published 2010-07-27 · Fixed CWE-252
Priority LOW 31
OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL po…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05203 · Published 2010-07-27 · Partial fix CWE-264
