CVE-2008-3283 Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory....
HighCVSS 7.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedora directory server | = 1.1.1 | No fix listed |
| redhat directory server | = 7.1-sp1 | No fix listed |
| redhat directory server | = 7.1-sp2 | No fix listed |
| redhat directory server | = 7.1-sp3 | No fix listed |
| redhat directory server | = 7.1-sp4 | No fix listed |
| redhat directory server | = 7.1-sp5 | No fix listed |
| redhat directory server | = 7.1-sp6 | No fix listed |
| redhat directory server | = 8.0 | No fix listed |
References
- SSRT080113 vendor-advisory
- 31565 third-party-advisory
- 31627 third-party-advisory
- 31702 third-party-advisory
- 31867 third-party-advisory
- 31913 third-party-advisory
- 1020774 vdb-entry
- www.redhat.com patch
- RHSA-2008:0602 vendor-advisory
- RHSA-2008:0858 vendor-advisory
- 30872 patch vdb-entry
- ADV-2008-2480 vdb-entry
- bugzilla.redhat.com
- rhds-leaks-dos(44731) vdb-entry
- oval:org.mitre.oval:def:6118 signature vdb-entry
- RHSA-2008:0596 vendor-advisory
- FEDORA-2008-7813 vendor-advisory
- FEDORA-2008-7891 vendor-advisory