Red Hat Security AdvisoryRHSA-2017:1852
openldap security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openldap-2.4.44-5.el7, openldap-clients-2.4.44-5.el7
- Red Hat Enterprise Linux Client Optional (v. 7) openldap-devel-2.4.44-5.el7, openldap-servers-2.4.44-5.el7, openldap-servers-sql-2.4.44-5.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openldap-2.4.44-5.el7, openldap-clients-2.4.44-5.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openldap-devel-2.4.44-5.el7, openldap-servers-2.4.44-5.el7, openldap-servers-sql-2.4.44-5.el7
- Red Hat Enterprise Linux Server (v. 7) openldap-2.4.44-5.el7, openldap-2.4.44-5.el7.ppc, openldap-clients-2.4.44-5.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) openldap-servers-sql-2.4.44-5.el7
- Red Hat Enterprise Linux Workstation (v. 7) openldap-2.4.44-5.el7, openldap-clients-2.4.44-5.el7, openldap-devel-2.4.44-5.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) openldap-servers-sql-2.4.44-5.el7
Fixes 1 record
Priority LOW 39
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.07143 · Published 2017-05-29 · Partial fix CWE-415
