Red Hat Security AdvisoryRHSA-2015:1840
openldap security update
Released 2015-09-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.43_2.2.29-29.el5_11, compat-openldap-2.3.43_2.2.29-29.el5_11.i386, compat-openldap-2.3.43_2.2.29-29.el5_11.ia64 +25
- Red Hat Enterprise Linux Client (v. 7) openldap-2.4.39-7.el7_1, openldap-clients-2.4.39-7.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) openldap-devel-2.4.39-7.el7_1, openldap-servers-2.4.39-7.el7_1, openldap-servers-sql-2.4.39-7.el7_1
- Red Hat Enterprise Linux ComputeNode (v. 7) openldap-2.4.39-7.el7_1, openldap-clients-2.4.39-7.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openldap-devel-2.4.39-7.el7_1, openldap-servers-2.4.39-7.el7_1, openldap-servers-sql-2.4.39-7.el7_1
- Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.43_2.2.29-29.el5_11, compat-openldap-2.3.43_2.2.29-29.el5_11.i386, openldap-2.3.43-29.el5_11 +3
- Red Hat Enterprise Linux Desktop (v. 6) openldap-2.4.40-6.el6_7, openldap-clients-2.4.40-6.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) openldap-devel-2.4.40-6.el6_7, openldap-servers-2.4.40-6.el6_7, openldap-servers-sql-2.4.40-6.el6_7
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.43-29.el5_11, openldap-devel-2.3.43-29.el5_11, openldap-devel-2.3.43-29.el5_11.i386 +6
- Red Hat Enterprise Linux HPC Node (v. 6) openldap-2.4.40-6.el6_7, openldap-clients-2.4.40-6.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openldap-devel-2.4.40-6.el6_7, openldap-servers-2.4.40-6.el6_7, openldap-servers-sql-2.4.40-6.el6_7
- Red Hat Enterprise Linux Server (v. 6) openldap-2.4.40-6.el6_7, openldap-2.4.40-6.el6_7.ppc, openldap-clients-2.4.40-6.el6_7 +3
- Red Hat Enterprise Linux Server (v. 7) openldap-2.4.39-7.ael7b_1, openldap-2.4.39-7.el7_1, openldap-2.4.39-7.el7_1.ppc +7
- Red Hat Enterprise Linux Server Optional (v. 6) openldap-servers-sql-2.4.40-6.el6_7
- Red Hat Enterprise Linux Server Optional (v. 7) openldap-servers-sql-2.4.39-7.ael7b_1, openldap-servers-sql-2.4.39-7.el7_1
- Red Hat Enterprise Linux Workstation (v. 6) openldap-2.4.40-6.el6_7, openldap-clients-2.4.40-6.el6_7, openldap-devel-2.4.40-6.el6_7 +1
- Red Hat Enterprise Linux Workstation (v. 7) openldap-2.4.39-7.el7_1, openldap-clients-2.4.39-7.el7_1, openldap-devel-2.4.39-7.el7_1 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openldap-servers-sql-2.4.40-6.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) openldap-servers-sql-2.4.39-7.el7_1
Fixes 1 record
Priority MEDIUM 41
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.18823 · Published 2015-09-11 · Partial fix CWE-20
