Summary
Karsten Heymann discovered that OpenLDAP incorrectly handled certain search
requests. A remote attacker could use this issue to cause slapd to crash,
resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | openldap | 2.4.31-1+nmu2ubuntu8.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | openldap | 2.4.42+dfsg-2ubuntu3.2 |
Vulnerabilities 1
-
Unscored —
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access …
References
-
report
https://ubuntu.com/security/CVE-2017-9287