Описание
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | openldap | Not affected | ||
| Red Hat Enterprise Linux 5 | openldap24-libs | Not affected | ||
| Red Hat Enterprise Linux 6 | compat-openldap | Not affected | ||
| Red Hat Enterprise Linux 6 | openldap | Not affected | ||
| Red Hat Enterprise Linux 7 | compat-openldap | Not affected | ||
| Red Hat Enterprise Linux 7 | openldap | Not affected | ||
| Red Hat Enterprise Linux 8 | openldap | Not affected | ||
| Red Hat JBoss Core Services | openldap | Not affected | ||
| Red Hat JBoss Enterprise Application Platform 5 | openldap | Will not fix | ||
| Red Hat JBoss Enterprise Web Server 2 | openldap | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when bot ...
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
EPSS
5.9 Medium
CVSS3