Описание
389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | |
| bionic | not-affected | |
| cosmic | not-affected | 1.4.0.18-1 |
| devel | not-affected | 3.1.2+vendor1-2 |
| disco | not-affected | 1.4.0.18-1 |
| eoan | not-affected | 1.4.0.18-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | |
| esm-apps/focal | not-affected | 1.4.0.18-1 |
| esm-apps/jammy | not-affected | 1.4.0.18-1 |
Показывать по
EPSS
5 Medium
CVSS2
3.7 Low
CVSS3
Связанные уязвимости
389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service.
389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service.
389-ds-base before version 1.3.6 is vulnerable to an improperly NULL t ...
389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service.
EPSS
5 Medium
CVSS2
3.7 Low
CVSS3