CVE-2017-15134

A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

Score
CVSS 3.0 7.5 High
Status
Modified - secalert@redhat.com
Published
2018-03-01
Last modified
2024-09-16
Weaknesses
CWE-119, CWE-120

Affected products

References