Red Hat Security AdvisoryRHSA-2018:1364
389-ds-base security update
Released 2018-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-95.el6_9, 389-ds-base-devel-1.2.11.15-95.el6_9, 389-ds-base-libs-1.2.11.15-95.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-95.el6_9, 389-ds-base-devel-1.2.11.15-95.el6_9, 389-ds-base-libs-1.2.11.15-95.el6_9
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-95.el6_9, 389-ds-base-libs-1.2.11.15-95.el6_9
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-devel-1.2.11.15-95.el6_9
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-95.el6_9, 389-ds-base-libs-1.2.11.15-95.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-devel-1.2.11.15-95.el6_9
Fixes 1 record
Priority MEDIUM 40
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04013 · Published 2018-05-09 · Fixed CWE-122
