Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2019:1207-2 Important: 389-ds Denial of Service Issues

suse
Calendar Grey July 1, 2019
Dist Suse Esm H88
In response to crucial vulnerabilities, SUSE enhances 389-ds to counter serious risks and bolster reliability.
An update that fixes 5 vulnerabilities is now available

Summary

This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search (bsc#1096368) - CVE-2017-15134: Fixed a remote denial of service via search filters in slapi_filter_sprintf in slapd/util.c (bsc#1076530) - CVE-2017-15135: Fixed authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (bsc#1076530) - CVE-2018-10935: Fixed an issue that allowed users to cause a crash via ldapsearch with server side sorts (bsc#1105606) - CVE-2018-14624: The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(), allowing an

Topics%20covered

Topics Covered

security advisory update important Denial of Service SUSE authentication bypass 389-ds

References

#1076530 #1096368 #1105606 #1106699

Cross- CVE-2017-15134 CVE-2017-15135 CVE-2018-10850

CVE-2018-10935 CVE-2018-14624

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15-SP1

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1

https://www.suse.com/security/cve/CVE-2017-15134.html

https://www.suse.com/security/cve/CVE-2017-15135.html

https://www.suse.com/security/cve/CVE-2018-10850.html

https://www.suse.com/security/cve/CVE-2018-10935.html

https://www.suse.com/security/cve/CVE-2018-14624.html

https://bugzilla.suse.com/1076530

https://bugzilla.suse.com/1096368

https://bugzilla.suse.com/1105606

https://bugzilla.suse.com/1106699

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:1207-2
Rating: important

Topics%20covered

Topics Covered

security advisory update important Denial of Service SUSE authentication bypass 389-ds

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here