Red Hat Security AdvisoryRHSA-2014:0126
openldap security and bug fix update
Released 2014-02-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openldap-2.4.23-34.el6_5.1, openldap-clients-2.4.23-34.el6_5.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openldap-2.4.23-34.el6_5.1, openldap-devel-2.4.23-34.el6_5.1, openldap-servers-2.4.23-34.el6_5.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openldap-2.4.23-34.el6_5.1, openldap-clients-2.4.23-34.el6_5.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openldap-2.4.23-34.el6_5.1, openldap-devel-2.4.23-34.el6_5.1, openldap-servers-2.4.23-34.el6_5.1 +1
- Red Hat Enterprise Linux Server (v. 6) openldap-2.4.23-34.el6_5.1, openldap-2.4.23-34.el6_5.1.ppc, openldap-clients-2.4.23-34.el6_5.1 +3
- Red Hat Enterprise Linux Server Optional (v. 6) openldap-2.4.23-34.el6_5.1, openldap-servers-sql-2.4.23-34.el6_5.1
- Red Hat Enterprise Linux Workstation (v. 6) openldap-2.4.23-34.el6_5.1, openldap-clients-2.4.23-34.el6_5.1, openldap-devel-2.4.23-34.el6_5.1 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openldap-2.4.23-34.el6_5.1, openldap-servers-sql-2.4.23-34.el6_5.1
Fixes 1 record
Priority LOW 33
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10913 · Published 2014-02-05 · Fixed CWE-189
