openldap: denial of service [LWN.net]

Package(s):

openldap

CVE #(s):

CVE-2012-1164

Created:

June 20, 2012

Updated:

August 13, 2012

Description:

From the Red Hat advisory:

A denial of service flaw was found in the way the OpenLDAP server daemon (slapd) processed certain search queries requesting only attributes and no values. In certain configurations, a remote attacker could issue a specially-crafted LDAP search query that, when processed by slapd, would cause slapd to crash due to an assertion failure.

Alerts:

Red Hat	RHSA-2012:0899-04	2012-06-20
Oracle	ELSA-2012-0899	2012-07-02
Scientific Linux	SL-open-20120709	2012-07-09
Mageia	MGASA-2012-0146	2012-07-09
CentOS	CESA-2012:0899	2012-07-10
Fedora	FEDORA-2012-10023	2012-07-17
Mandriva	MDVSA-2012:130	2012-08-12

(Log in to post comments)