A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
{
"binaries": [
{
"binary_version": "2.0.15-1ubuntu2",
"binary_name": "389-ds"
},
{
"binary_version": "2.0.15-1ubuntu2",
"binary_name": "389-ds-base"
},
{
"binary_version": "2.0.15-1ubuntu2",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "2.0.15-1ubuntu2",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "2.0.15-1ubuntu2",
"binary_name": "cockpit-389-ds"
},
{
"binary_version": "2.0.15-1ubuntu2",
"binary_name": "python3-lib389"
}
]
}{
"binaries": [
{
"binary_version": "2.4.5+dfsg1-1",
"binary_name": "389-ds"
},
{
"binary_version": "2.4.5+dfsg1-1",
"binary_name": "389-ds-base"
},
{
"binary_version": "2.4.5+dfsg1-1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "2.4.5+dfsg1-1",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "2.4.5+dfsg1-1",
"binary_name": "cockpit-389-ds"
},
{
"binary_version": "2.4.5+dfsg1-1",
"binary_name": "python3-lib389"
}
]
}{
"binaries": [
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds-base"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "cockpit-389-ds"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "python3-lib389"
}
]
}{
"binaries": [
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds-base"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "cockpit-389-ds"
},
{
"binary_version": "3.1.2+dfsg1-1",
"binary_name": "python3-lib389"
}
]
}{
"binaries": [
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds"
},
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds-base"
},
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds-base-libs"
}
]
}{
"binaries": [
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds-base"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "python3-dirsrvtests"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "python3-lib389"
}
]
}{
"binaries": [
{
"binary_version": "1.4.3.6-2ubuntu0.1~esm1",
"binary_name": "389-ds"
},
{
"binary_version": "1.4.3.6-2ubuntu0.1~esm1",
"binary_name": "389-ds-base"
},
{
"binary_version": "1.4.3.6-2ubuntu0.1~esm1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "1.4.3.6-2ubuntu0.1~esm1",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "1.4.3.6-2ubuntu0.1~esm1",
"binary_name": "cockpit-389-ds"
},
{
"binary_version": "1.4.3.6-2ubuntu0.1~esm1",
"binary_name": "python3-lib389"
}
]
}