Red Hat Security AdvisoryRHSA-2014:0206
openldap security update
Released 2014-02-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.43_2.2.29-27.el5_10, compat-openldap-2.3.43_2.2.29-27.el5_10.i386, compat-openldap-2.3.43_2.2.29-27.el5_10.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.43_2.2.29-27.el5_10, compat-openldap-2.3.43_2.2.29-27.el5_10.i386, openldap-2.3.43-27.el5_10 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.43-27.el5_10, openldap-devel-2.3.43-27.el5_10, openldap-devel-2.3.43-27.el5_10.i386 +6
Fixes 1 record
Priority LOW 33
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10913 · Published 2014-02-05 · Fixed CWE-189
