Описание
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
A double free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | 389-ds-base | Not affected | ||
| Red Hat Enterprise Linux 9 | 389-ds-base | Not affected | ||
| Red Hat Directory Server 11.3 for RHEL 8 | redhat-ds | Fixed | RHSA-2022:0952 | 16.03.2022 |
| Red Hat Enterprise Linux 7 | 389-ds-base | Fixed | RHSA-2022:0628 | 22.02.2022 |
| Red Hat Enterprise Linux 8 | 389-ds | Fixed | RHSA-2022:0889 | 15.03.2022 |
| Red Hat Enterprise Linux 8.4 Extended Update Support | 389-ds | Fixed | RHSA-2022:1410 | 19.04.2022 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
A double-free was found in the way 389-ds-base handles virtual attribu ...
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
EPSS
7.5 High
CVSS3