Description
Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Directory Server 8 | redhat-ds-base +1 | 8.0.3-16.el5dsrv | RHSA-2008:0269 |
| Red Hat Directory Server 7 | redhat-ds | 7.1SP6-9.RHEL4 | RHSA-2008:0268 |
Advisories 2
- RHSA-2008:0268 Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 6 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0269 Red Hat Security Advisory: redhat-ds-base security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 29126 vdb-entry
- 1020001 vdb-entry
- RHSA-2008:0268 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=444712
- 30185 third-party-advisory
- 30181 third-party-advisory
- rhds-fedora-expression-bo(42332) vdb-entry
- RHSA-2008:0269 vendor-advisory