Red Hat Security Advisory

RHSA-2017:0893

389-ds-base security and bug fix update

Released 2017-04-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-91.el6_9, 389-ds-base-devel-1.2.11.15-91.el6_9, 389-ds-base-libs-1.2.11.15-91.el6_9
Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-91.el6_9, 389-ds-base-devel-1.2.11.15-91.el6_9, 389-ds-base-libs-1.2.11.15-91.el6_9
Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-91.el6_9, 389-ds-base-libs-1.2.11.15-91.el6_9
Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-devel-1.2.11.15-91.el6_9
Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-91.el6_9, 389-ds-base-libs-1.2.11.15-91.el6_9
Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-devel-1.2.11.15-91.el6_9

TI-2017-01914 CVE-2017-2668 · GHSA-8xf9-83fh-q7rf

LOW 34

389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02501 Published 2018-06-22 Fixed CWE-119