| Package | Affected versions | Patched versions |
|---|---|---|
| 389 directory server | ≥ 1.3.5.0, < 1.3.5.17≥ 1.3.6.0, < 1.3.6.10 | 1.3.5.171.3.6.10 |
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free