Red Hat Security AdvisoryRHSA-2017:0920
389-ds-base security and bug fix update
Released 2017-04-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.5.10-20.el7_3, 389-ds-base-devel-1.3.5.10-20.el7_3, 389-ds-base-libs-1.3.5.10-20.el7_3 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.5.10-20.el7_3, 389-ds-base-devel-1.3.5.10-20.el7_3, 389-ds-base-libs-1.3.5.10-20.el7_3 +1
- Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.5.10-20.el7_3, 389-ds-base-libs-1.3.5.10-20.el7_3
- Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-devel-1.3.5.10-20.el7_3, 389-ds-base-snmp-1.3.5.10-20.el7_3
- Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.5.10-20.el7_3, 389-ds-base-libs-1.3.5.10-20.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.5.10-20.el7_3, 389-ds-base-snmp-1.3.5.10-20.el7_3
Fixes 1 record
Priority LOW 34
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02501 · Published 2018-06-22 · Fixed CWE-119