MGASA-2017-0028

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0028.html

Import Source

https://advisories.mageia.org/MGASA-2017-0028.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0028

Upstream

CVE-2017-2591

Published

2017-01-27T20:30:52Z

Modified

2026-04-16T06:25:34.617541549Z

Summary

Updated 389-ds-base packages fix security vulnerability

Details

The "attribute uniqueness" plugin did not properly NULL-terminate an array when building up its configuration if a so called 'old-style' configuration was being used. An attacker, authenticated, but possibly also unauthenticated, could possibly force the plugin to read beyond allocated memory and trigger a segfault. The crash could also possibly be triggered accidentally (CVE-2017-2591).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / 389-ds-base

Package

Name: 389-ds-base
Purl: pkg:rpm/mageia/389-ds-base?arch=source&distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.4.14-1.1.mga5

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2017-0028.json"