CVE-2008-2930 Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via craft...
HighCVSS 7.1
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedora directory server | = 1.1.1 | No fix listed |
| redhat directory server | = 7.1-sp1 | No fix listed |
| redhat directory server | = 7.1-sp2 | No fix listed |
| redhat directory server | = 7.1-sp3 | No fix listed |
| redhat directory server | = 7.1-sp4 | No fix listed |
| redhat directory server | = 7.1-sp5 | No fix listed |
| redhat directory server | = 7.1-sp6 | No fix listed |
| redhat directory server | = 8.0 | No fix listed |
References
- SSRT080113 vendor-advisory
- 31565 third-party-advisory
- 31627 third-party-advisory
- 31702 third-party-advisory
- 31867 third-party-advisory
- 1020773 vdb-entry
- www.redhat.com patch
- RHSA-2008:0602 vendor-advisory
- RHSA-2008:0858 vendor-advisory
- 30871 patch vdb-entry
- ADV-2008-2480 vdb-entry
- bugzilla.redhat.com
- rhds-ldapsearch-dos(44733) vdb-entry
- oval:org.mitre.oval:def:6078 signature vdb-entry
- RHSA-2008:0596 vendor-advisory
- FEDORA-2008-7813 vendor-advisory
- FEDORA-2008-7891 vendor-advisory