Skip to content
OpenAdvisories
High ELSA-2015-1840 1 CVE

Important: openldap security update (Oracle Linux 7)

Published Sep 29, 2015 · Updated Sep 29, 2015

Ecosystem: Oracle Linux

Summary

[2.3.43-29]
- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 compat-openldap 0:2.3.43_2.2.29-29.el5_11
Oracle Linux · 7 openldap 0:2.4.40-6.el6_7
Oracle Linux · 7 openldap-clients 0:2.4.40-6.el6_7
Oracle Linux · 7 openldap-devel 0:2.4.40-6.el6_7
Oracle Linux · 7 openldap-servers 0:2.4.40-6.el6_7
Oracle Linux · 7 openldap-servers-overlays 0:2.3.43-29.el5_11
Oracle Linux · 7 openldap-servers-sql 0:2.4.40-6.el6_7

Vulnerabilities 1

  • Unscored —
    CVE-2015-6908 Public exploit EPSS 19%

    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a d…

    openldap openldap Debian Ubuntu