Red Hat Security AdvisoryRHSA-2012:0899
openldap security and bug fix update
Released 2012-06-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openldap-2.4.23-26.el6, openldap-clients-2.4.23-26.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) openldap-2.4.23-26.el6, openldap-devel-2.4.23-26.el6, openldap-servers-2.4.23-26.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openldap-2.4.23-26.el6, openldap-clients-2.4.23-26.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openldap-2.4.23-26.el6, openldap-devel-2.4.23-26.el6, openldap-servers-2.4.23-26.el6 +1
- Red Hat Enterprise Linux Server (v. 6) openldap-2.4.23-26.el6, openldap-2.4.23-26.el6.ppc, openldap-clients-2.4.23-26.el6 +3
- Red Hat Enterprise Linux Server Optional (v. 6) openldap-2.4.23-26.el6, openldap-servers-sql-2.4.23-26.el6
- Red Hat Enterprise Linux Workstation (v. 6) openldap-2.4.23-26.el6, openldap-clients-2.4.23-26.el6, openldap-devel-2.4.23-26.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openldap-2.4.23-26.el6, openldap-servers-sql-2.4.23-26.el6
Fixes 1 record
Priority LOW 19
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03537 · Published 2012-06-29 · Fixed CWE-119
