CVE-2008-2930
Fixed in a distro release EPSS 7%
Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem.
Products: fedora directory_server, redhat directory_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat directory server 7.1 | redhat-ds | 0:7.1SP7-14.RHEL4 |
| Red Hat directory server 8 | redhat-ds-admin | 0:8.0.4-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-admin-debuginfo | 0:8.0.4-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base | 0:8.0.4-7.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-debuginfo | 0:8.0.4-7.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-devel | 0:8.0.4-7.el5dsrv |
| Red Hat enterprise ipa 1.0 | redhat-ds-base | 0:8.0.4-7.el5dsrv |
| Red Hat enterprise ipa 1.0 | redhat-ds-base-debuginfo | 0:8.0.4-7.el5dsrv |
| Red Hat enterprise ipa 1.0 | redhat-ds-base-devel | 0:8.0.4-7.el5dsrv |