CVE-2008-3283
Fixed in a distro release EPSS 3%
Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests.
Products: fedora directory_server, redhat directory_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat directory server 7.1 | redhat-ds | 0:7.1SP7-14.RHEL4 |
| Red Hat directory server 8 | redhat-ds-admin | 0:8.0.4-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-admin-debuginfo | 0:8.0.4-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base | 0:8.0.4-7.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-debuginfo | 0:8.0.4-7.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-devel | 0:8.0.4-7.el5dsrv |
| Red Hat enterprise ipa 1.0 | redhat-ds-base | 0:8.0.4-7.el5dsrv |
| Red Hat enterprise ipa 1.0 | redhat-ds-base-debuginfo | 0:8.0.4-7.el5dsrv |
| Red Hat enterprise ipa 1.0 | redhat-ds-base-devel | 0:8.0.4-7.el5dsrv |