Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-9287

Fixed in a distro release EPSS 7%

servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.

Published 2017-05-29 · CVE record · OSV

Products: openldap, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, mcafee policy_auditor, oracle blockchain_platform

Distro releases

ReleasePackageFixed in
Alpine 3.10openldap2.4.44-r5
Alpine 3.11openldap2.4.44-r5
Alpine 3.12openldap2.4.44-r5
Alpine 3.13openldap2.4.44-r5
Alpine 3.14openldap2.4.44-r5
Alpine 3.15openldap2.4.44-r5
Alpine 3.16openldap2.4.44-r5
Alpine 3.17openldap2.4.44-r5
Alpine 3.18openldap2.4.44-r5
Alpine 3.19openldap2.4.44-r5
Alpine 3.20openldap2.4.44-r5
Alpine 3.21openldap2.4.44-r5
Alpine 3.22openldap2.4.44-r5
Alpine 3.23openldap2.4.44-r5
Alpine 3.24openldap2.4.44-r5
Alpine 3.3openldap2.4.44-r1
Alpine 3.4openldap2.4.44-r2
Alpine 3.5openldap2.4.44-r4
Alpine 3.6openldap2.4.44-r5
Alpine 3.7openldap2.4.44-r5
Alpine 3.8openldap2.4.44-r5
Alpine 3.9openldap2.4.44-r5
Arch Linuxopenldap2.4.45-1
Debian 12openldap2.4.44+dfsg-5
Debian 13openldap2.4.44+dfsg-5
Debian 14openldap2.4.44+dfsg-5
Debian 7openldap2.4.31-2+deb7u3
Debian 8openldap2.4.40+dfsg-1+deb8u3
Red Hat Enterprise Linux 7openldap0:2.4.44-5.el7
Red Hat Enterprise Linux 7openldap-clients0:2.4.44-5.el7
Red Hat Enterprise Linux 7openldap-debuginfo0:2.4.44-5.el7
Red Hat Enterprise Linux 7openldap-devel0:2.4.44-5.el7
Red Hat Enterprise Linux 7openldap-servers0:2.4.44-5.el7
Red Hat Enterprise Linux 7openldap-servers-sql0:2.4.44-5.el7
SUSE Linux Enterprise Desktop 12 SP2openldap22.4.41-18.29.1
SUSE Linux Enterprise Module for Legacy 12openldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server 12 SP1-LTSSopenldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server 12 SP1-LTSSopenldap2-client2.4.41-18.24.9.1
SUSE Linux Enterprise Server 12 SP2openldap22.4.41-18.29.1
SUSE Linux Enterprise Server 12-LTSSopenldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server 12-LTSSopenldap2-client2.4.41-18.24.9.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2openldap22.4.41-18.29.1
SUSE Linux Enterprise Server for SAP Applications 12openldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server for SAP Applications 12openldap2-client2.4.41-18.24.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1openldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server for SAP Applications 12 SP1openldap2-client2.4.41-18.24.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2openldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server for SAP Applications 12 SP2openldap22.4.41-18.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3openldap22.4.41-18.24.9.7
SUSE Linux Enterprise Server for SAP Applications 12 SP4openldap22.4.41-18.24.9.7
SUSE Linux Enterprise Software Development Kit 12 SP2openldap22.4.41-18.29.1
Ubuntu 14.04 LTSopenldap2.4.31-1+nmu2ubuntu8.4
Ubuntu 16.04 LTSopenldap2.4.42+dfsg-2ubuntu3.2