CVE-2017-15134
389-ds: A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x...
CVE-2017-15134 is fixed in 5 products on 1 platform, first by 389-ds 1.3.7.9-1, released March 1, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0387
90th percentile
A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| 389-ds · Ubuntu 18.04.6 LTS (bionic) | 1.3.7.9-1 | 389-ds 1.3.7.9-1 | Mar 1, 2018 |
| 389-ds-base · Ubuntu 18.04.6 LTS (bionic) | 1.3.7.9-1 | 389-ds-base 1.3.7.9-1 | Mar 1, 2018 |
| 389-ds-base-libs · Ubuntu 18.04.6 LTS (bionic) | 1.3.7.9-1 | 389-ds-base-libs 1.3.7.9-1 | Mar 1, 2018 |
| python3-dirsrvtests · Ubuntu 18.04.6 LTS (bionic) | 1.3.7.9-1 | python3-dirsrvtests 1.3.7.9-1 | Mar 1, 2018 |
| python3-lib389 · Ubuntu 18.04.6 LTS (bionic) | 1.3.7.9-1 | python3-lib389 1.3.7.9-1 | Mar 1, 2018 |