Red Hat Security Advisory

RHSA-2018:0163

389-ds-base security and bug fix update

Released 2018-01-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-devel-1.3.6.1-26.el7_4, 389-ds-base-libs-1.3.6.1-26.el7_4 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-devel-1.3.6.1-26.el7_4, 389-ds-base-libs-1.3.6.1-26.el7_4 +1
Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-libs-1.3.6.1-26.el7_4
Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-devel-1.3.6.1-26.el7_4, 389-ds-base-libs-1.3.6.1-26.el7_4 +1
Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-libs-1.3.6.1-26.el7_4
Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.6.1-26.el7_4, 389-ds-base-snmp-1.3.6.1-26.el7_4
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-libs-1.3.6.1-26.el7_4
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) 389-ds-base-1.3.6.1-26.el7_4, 389-ds-base-devel-1.3.6.1-26.el7_4, 389-ds-base-snmp-1.3.6.1-26.el7_4

Fixes 1 record

TI-2017-11104 CVE-2017-15134 · GHSA-7358-vfr4-6m85

Buffer overflow in Red Hat 389-ds-base

LOW 39

A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03874 Published 2018-03-01 Fixed CWE-120