| Package | Affected versions | Patched versions |
|---|---|---|
| 389 directory server | = 1.3.8.1= 1.3.8.2≥ 1.3.6.0, < 1.3.6.15≥ 1.4.0.0, < 1.4.0.9 | 1.3.6.151.4.0.9 |
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free