Description
slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Directory Server 8 | redhat-ds-admin | 8.2.1-1.el5dsrv | RHSA-2011:0293 |
| Red Hat Directory Server 8 | redhat-ds-base +1 | 8.2.4-1.el5dsrv | RHSA-2011:0293 |
Advisories 1
- RHSA-2011:0293 Red Hat Security Advisory: Red Hat Directory Server security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- 1025102 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=666076
- https://bugzilla.redhat.com/show_bug.cgi?id=670914
- RHSA-2011:0293 vendor-advisory
- 46489 vdb-entry