Red Hat Security AdvisoryRHSA-2010:0543
openldap security update
Released 2010-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 compat-openldap-2.1.30-12.el4_8.3, compat-openldap-2.1.30-12.el4_8.3.i386, compat-openldap-2.1.30-12.el4_8.3.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 compat-openldap-2.1.30-12.el4_8.3, compat-openldap-2.1.30-12.el4_8.3.i386, openldap-2.2.13-12.el4_8.3 +9
- Red Hat Enterprise Linux ES version 4 compat-openldap-2.1.30-12.el4_8.3, compat-openldap-2.1.30-12.el4_8.3.i386, compat-openldap-2.1.30-12.el4_8.3.ia64 +15
- Red Hat Enterprise Linux WS version 4 compat-openldap-2.1.30-12.el4_8.3, compat-openldap-2.1.30-12.el4_8.3.i386, compat-openldap-2.1.30-12.el4_8.3.ia64 +15
Fixes 2 records
Priority HIGH 65
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and po…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.28472 · Published 2010-07-27 · Fixed CWE-252
Priority LOW 26
libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certifi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03258 · Published 2009-10-23 · Partial fix CWE-295
