Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-15134: A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service. 1531573: CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | 389-ds-base | 0:1.3.6.1-26.amzn2.0.1 |
| Amazon Linux · 2 | 389-ds-base-debuginfo | 0:1.3.6.1-26.amzn2.0.1 |
| Amazon Linux · 2 | 389-ds-base-devel | 0:1.3.6.1-26.amzn2.0.1 |
| Amazon Linux · 2 | 389-ds-base-libs | 0:1.3.6.1-26.amzn2.0.1 |
| Amazon Linux · 2 | 389-ds-base-snmp | 0:1.3.6.1-26.amzn2.0.1 |
Vulnerabilities 1
-
Unscored —
A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x be…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-15134.html