Red Hat Security AdvisoryRHSA-2020:4041
openldap security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openldap-2.4.44-22.el7, openldap-clients-2.4.44-22.el7
- Red Hat Enterprise Linux Client Optional (v. 7) openldap-devel-2.4.44-22.el7, openldap-servers-2.4.44-22.el7, openldap-servers-sql-2.4.44-22.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openldap-2.4.44-22.el7, openldap-clients-2.4.44-22.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openldap-devel-2.4.44-22.el7, openldap-servers-2.4.44-22.el7, openldap-servers-sql-2.4.44-22.el7
- Red Hat Enterprise Linux Server (v. 7) openldap-2.4.44-22.el7, openldap-2.4.44-22.el7.ppc, openldap-clients-2.4.44-22.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) openldap-servers-sql-2.4.44-22.el7
- Red Hat Enterprise Linux Workstation (v. 7) openldap-2.4.44-22.el7, openldap-clients-2.4.44-22.el7, openldap-devel-2.4.44-22.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) openldap-servers-sql-2.4.44-22.el7
Fixes 1 record
Priority MEDIUM 40
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04718 · Published 2020-04-28 · Partial fix CWE-674
