MGASA-2026-0310

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2026-0310.html

Import Source

https://advisories.mageia.org/MGASA-2026-0310.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2026-0310

Upstream

CVE-2026-9064

Published

2026-07-30T17:03:15Z

Modified

2026-07-30T17:15:06.341034599Z

Summary

Updated 389-ds-base packages fix a security vulnerability

Details

The updated packages fix a security vulnerability: Unbounded ldap controls count in getldapmessagecontrols_ext() causes cpu and heap amplification (remote dos). (CVE-2026-9064)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:10 / 389-ds-base

Package

Name: 389-ds-base
Purl: pkg:rpm/mageia/389-ds-base?arch=source&distro=mageia-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.3-2.1.mga10

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2026-0310.json"