Errata ID | 371 |
---|---|
Date | 2015-09-23 |
Source package | openldap |
Fixed in version | 2.4.35-1.203.201509141755 |
Description | This update addresses the following issues: * When using the mdb backend, the ldap search erroneously returned the base object in some cases. This has been fixed. * If the slapo-deref overlay is used (which is not the case in a standard UCS installation) and if the list of attributes to be dereferenced is left empty, slapd can be crashed (CVE-2015-1545) * Denial of service by unauthenticated remote attackers via crafted BER data (CVE-2015-6908) |
Additional notes | |
CVE ID | CVE-2015-1545 CVE-2015-6908 |
UCS Bug number | #38424 #37728 |