|
|
Subscribe / Log in / New account

389-ds-base: denial of service

Package(s):389-ds-base CVE #(s):CVE-2017-2591
Created:January 30, 2017 Updated:February 1, 2017
Description: From the Mageia advisory:

The "attribute uniqueness" plugin did not properly NULL-terminate an array when building up its configuration if a so called 'old-style' configuration was being used. An attacker, authenticated, but possibly also unauthenticated, could possibly force the plugin to read beyond allocated memory and trigger a segfault. The crash could also possibly be triggered accidentally.

Alerts:
Mageia MGASA-2017-0028 389-ds-base 2017-01-27

to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds