Описание
A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing another call to refer to the same memory pointer causing a denial of service or an arbitrary memory write operation.
Отчет
Red-hat rates this vulnerability as Moderate impact. The function can allow an unauthenticated attacker to send malformed DN requests and trigger the bug. Denial of service is more reliably observed when heap debugging is enabled (for example AddressSanitizer or MALLOC_CHECK_=3), or depending on heap layout and subsequent memory allocator activity. For this reason Red Hat rates availability impact as Low (A:L) rather than High. There is no configuration switch to disable DN normalization for client-supplied DNs.
Меры по смягчению последствий
Denial of service is more reliably observed when heap debugging is enabled (for example AddressSanitizer or MALLOC_CHECK_=3), or depending on heap layout and subsequent memory allocator activity. For this reason Red Hat rates availability impact as Low (A:L) rather than High. There is no configuration switch to disable DN normalization for client-supplied DNs. The vulnerable code path is present in all currently supported 389-ds-base versions that ship the quoted-RDN parsing logic in dn.c.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Directory Server 11 | redhat-ds:11/389-ds-base | Fix deferred | ||
| Red Hat Directory Server 12 | redhat-ds:12/389-ds-base | Fix deferred | ||
| Red Hat Directory Server 13 | 389-ds-base | Fix deferred | ||
| Red Hat Enterprise Linux 10 | 389-ds-base | Fix deferred | ||
| Red Hat Enterprise Linux 6 | 389-ds-base | Fix deferred | ||
| Red Hat Enterprise Linux 7 | 389-ds-base | Fix deferred | ||
| Red Hat Enterprise Linux 8 | 389-ds-base | Fix deferred | ||
| Red Hat Enterprise Linux 9 | 389-ds-base | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing another call to refer to the same memory pointer causing a denial of service or an arbitrary memory write operation.
A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing another call to refer to the same memory pointer causing a denial of service or an arbitrary memory write operation.
A heap-buffer-overflow flaw was found in Directory Server (389-ds-base ...
A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing another call to refer to the same memory pointer causing a denial of service or an arbitrary memory write operation.
EPSS
5.3 Medium
CVSS3