Skip to content
OpenAdvisories
High ALAS2-2018-1036 1 CVE

Important: 389-ds-base security update (Amazon Linux 2)

Published Jun 8, 2018 · Updated Jun 11, 2018

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1089: It was found that 389-ds-base did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service. 1559802: CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 389-ds-base 0:1.3.7.5-21.amzn2.0.1
Amazon Linux · 2 389-ds-base-debuginfo 0:1.3.7.5-21.amzn2.0.1
Amazon Linux · 2 389-ds-base-devel 0:1.3.7.5-21.amzn2.0.1
Amazon Linux · 2 389-ds-base-libs 0:1.3.7.5-21.amzn2.0.1
Amazon Linux · 2 389-ds-base-snmp 0:1.3.7.5-21.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-1089.html