A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.
{
"binaries": [
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds"
},
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds-base"
},
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "1.3.4.9-1ubuntu0.1~esm1",
"binary_name": "389-ds-base-libs"
}
]
}
{
"binaries": [
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds-base"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds-base-dev"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "389-ds-base-libs"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "python3-dirsrvtests"
},
{
"binary_version": "1.3.7.10-1ubuntu1+esm1",
"binary_name": "python3-lib389"
}
]
}