Total vulnerabilities in the database
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
| Software | From | Fixed in |
|---|---|---|
| port389 / 389-ds-base | 1.4.0 | 1.4.0.x |
| redhat / enterprise_linux | 8.0 | 8.0.x |