Ubuntu 17.04 USN-3307-1 Moderate: OpenLDAP Denial Of Service

ubuntu

June 1, 2017

OpenLDAP could be made to crash if it received specially crafted network traffic.

Summary

OpenLDAP could be made to crash if it received specially crafted network

traffic.

Software Description:

- openldap: OpenLDAP utilities

Details:

Karsten Heymann discovered that OpenLDAP incorrectly handled certain search

requests. A remote attacker could use this issue to cause slapd to crash,

resulting in a denial of service.

Topics Covered

security advisory moderate denial of service openldap ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  slapd                           2.4.44+dfsg-3ubuntu2.1

Ubuntu 16.10:
  slapd                           2.4.42+dfsg-2ubuntu4.1

Ubuntu 16.04 LTS:
  slapd                           2.4.42+dfsg-2ubuntu3.2

Ubuntu 14.04 LTS:
  slapd                           2.4.31-1+nmu2ubuntu8.4

In general, a standard system update will make all the necessary changes.