CVE-2010-4746

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2) pointer mishandling in the syntax normalization code, a different issue than CVE-2011-0019.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2011-02-23

Last modified

2024-09-16

Weaknesses

CWE-399

Affected products

• 389 Directory Server (Fedoraproject)

References

• http://directory.fedoraproject.org/wiki/Release_Notes
• https://bugzilla.redhat.com/show_bug.cgi?id=663597