Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-0741 (GCVE-0-2016-0741)
Vulnerability from cvelistv5 – Published: 2016-04-19 21:00 – Updated: 2024-08-05 22:30
VLAI?
EPSS
Summary
slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
Date Public ?
2016-01-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T22:30:04.204Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"name": "RHSA-2016:0204",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"name": "82343",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/82343"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-01-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-07T17:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"name": "RHSA-2016:0204",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"name": "82343",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/82343"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2016-0741",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://fedorahosted.org/389/ticket/48412",
"refsource": "CONFIRM",
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/",
"refsource": "CONFIRM",
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"name": "RHSA-2016:0204",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"name": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html",
"refsource": "CONFIRM",
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"name": "82343",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/82343"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2016-0741",
"datePublished": "2016-04-19T21:00:00.000Z",
"dateReserved": "2015-12-16T00:00:00.000Z",
"dateUpdated": "2024-08-05T22:30:04.204Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2016-0741",
"date": "2026-04-24",
"epss": "0.0402",
"percentile": "0.88484"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C84489B-B08C-4854-8A12-D01B6E45CF79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA30F3F3-3384-4E46-B51F-FCAF43728779\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AC25FDF-B453-471A-84B7-AFA08B6039CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C78CE214-54CB-4ECC-B45D-CFABF249E1E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6CCA8C87-70FF-488E-9A3F-26D77323AB75\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.\"}, {\"lang\": \"es\", \"value\": \"slapd/connection.c en 389 Directory Server (anteriormente Fedora Directory Server) 1.3.4.x en versiones anteriores a 1.3.4.7 permite a atacantes remotos causar una denegaci\\u00f3n de servicio (bucle infinito y bloqueo de conexion) aprovech\\u00e1ndose de una conexi\\u00f3n cerrada de manera an\\u00f3mala.\"}]",
"id": "CVE-2016-0741",
"lastModified": "2024-11-21T02:42:17.493",
"metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:C\", \"baseScore\": 7.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false}]}",
"published": "2016-04-19T21:59:06.973",
"references": "[{\"url\": \"http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-0204.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/82343\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://fedorahosted.org/389/ticket/48412\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-0204.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/82343\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://fedorahosted.org/389/ticket/48412\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-399\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2016-0741\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2016-04-19T21:59:06.973\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.\"},{\"lang\":\"es\",\"value\":\"slapd/connection.c en 389 Directory Server (anteriormente Fedora Directory Server) 1.3.4.x en versiones anteriores a 1.3.4.7 permite a atacantes remotos causar una denegaci\u00f3n de servicio (bucle infinito y bloqueo de conexion) aprovech\u00e1ndose de una conexi\u00f3n cerrada de manera an\u00f3mala.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C84489B-B08C-4854-8A12-D01B6E45CF79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA30F3F3-3384-4E46-B51F-FCAF43728779\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AC25FDF-B453-471A-84B7-AFA08B6039CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C78CE214-54CB-4ECC-B45D-CFABF249E1E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CCA8C87-70FF-488E-9A3F-26D77323AB75\"}]}]}],\"references\":[{\"url\":\"http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0204.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/82343\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://fedorahosted.org/389/ticket/48412\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0204.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/82343\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://fedorahosted.org/389/ticket/48412\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
GHSA-HX2C-R32G-8W55
Vulnerability from github – Published: 2022-05-17 03:47 – Updated: 2025-04-12 12:58
VLAI?
Details
slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.
Severity ?
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2016-0741"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-04-19T21:59:00Z",
"severity": "HIGH"
},
"details": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.",
"id": "GHSA-hx2c-r32g-8w55",
"modified": "2025-04-12T12:58:50Z",
"published": "2022-05-17T03:47:57Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0741"
},
{
"type": "WEB",
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2"
},
{
"type": "WEB",
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"type": "WEB",
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/82343"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2016-0741
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-0741",
"description": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.",
"id": "GSD-2016-0741",
"references": [
"https://www.suse.com/security/cve/CVE-2016-0741.html",
"https://access.redhat.com/errata/RHSA-2016:0204",
"https://advisories.mageia.org/CVE-2016-0741.html",
"https://alas.aws.amazon.com/cve/html/CVE-2016-0741.html",
"https://linux.oracle.com/cve/CVE-2016-0741.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-0741"
],
"details": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.",
"id": "GSD-2016-0741",
"modified": "2023-12-13T01:21:17.931981Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2016-0741",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://fedorahosted.org/389/ticket/48412",
"refsource": "CONFIRM",
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/",
"refsource": "CONFIRM",
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"name": "RHSA-2016:0204",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"name": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html",
"refsource": "CONFIRM",
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"name": "82343",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/82343"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2016-0741"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://fedorahosted.org/389/ticket/48412",
"refsource": "CONFIRM",
"tags": [],
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"name": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"name": "82343",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/82343"
},
{
"name": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/",
"refsource": "CONFIRM",
"tags": [],
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"name": "RHSA-2016:0204",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH"
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2016-10-12T02:01Z",
"publishedDate": "2016-04-19T21:59Z"
}
}
}
RHSA-2016_0204
Vulnerability from csaf_redhat - Published: 2016-02-16 10:47 - Updated: 2024-11-22 09:42Summary
Red Hat Security Advisory: 389-ds-base security and bug fix update
Severity
Important
Notes
Topic: Updated 389-ds-base packages that fix one security issue and several bugs
are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server.
The base packages include the Lightweight Directory Access Protocol (LDAP)
server and command-line utilities for server administration.
An infinite-loop vulnerability was discovered in the 389 directory server,
where the server failed to correctly handle unexpectedly closed client
connections. A remote attacker able to connect to the server could use this
flaw to make the directory server consume an excessive amount of CPU and
stop accepting connections (denial of service). (CVE-2016-0741)
This update fixes the following bugs:
* Previously, if a simple paged results search failed in the back end, the
simple paged results slot was not released. Consequently, the simple paged
results slots in a connection object could be accumulated. With this
update, the simple paged results slot is released correctly when a search
fails, and unused simple paged results slots are no longer left in a
connection object. (BZ#1290725)
* Previously, when several values of the same attribute were deleted using
the ldapmodify command, and at least one of them was added again during the
same operation, the equality index was not updated. As a consequence, an
exact search for the re-added attribute value did not return the entry. The
logic of the index code has been modified to update the index if at least
one of the values in the entry changes, and the exact search for the
re-added attribute value now returns the correct entry. (BZ#1290726)
* Prior to this update, when the cleanAllRUV task was running, a bogus
attrlist_replace error message was logged repeatedly due to a memory
corruption. With this update, the appropriate memory copy function memmove
is used, which fixes the memory corruption. As a result, the error messages
are no longer logged in this scenario. (BZ#1295684)
* To fix a simple paged results bug, an exclusive lock on a connection was
previously added. This consequently caused a self deadlock in a particular
case. With this update, the exclusive lock on a connection has been changed
to the re-entrant type, and the self deadlock no longer occurs.
(BZ#1298105)
* Previously, an unnecessary lock was sometimes acquired on a connection
object, which could consequently cause a deadlock. A patch has been applied
to remove the unnecessary locking, and the deadlock no longer occurs.
(BZ#1299346)
Users of 389-ds-base are advised to upgrade to these updated packages,
which correct these issues. After installing this update, the 389 server
service will be restarted automatically.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).
5.0 ()
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0204
References
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated 389-ds-base packages that fix one security issue and several bugs\nare now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server.\nThe base packages include the Lightweight Directory Access Protocol (LDAP)\nserver and command-line utilities for server administration.\n\nAn infinite-loop vulnerability was discovered in the 389 directory server,\nwhere the server failed to correctly handle unexpectedly closed client\nconnections. A remote attacker able to connect to the server could use this\nflaw to make the directory server consume an excessive amount of CPU and\nstop accepting connections (denial of service). (CVE-2016-0741)\n\nThis update fixes the following bugs:\n\n* Previously, if a simple paged results search failed in the back end, the\nsimple paged results slot was not released. Consequently, the simple paged\nresults slots in a connection object could be accumulated. With this\nupdate, the simple paged results slot is released correctly when a search\nfails, and unused simple paged results slots are no longer left in a\nconnection object. (BZ#1290725)\n\n* Previously, when several values of the same attribute were deleted using\nthe ldapmodify command, and at least one of them was added again during the\nsame operation, the equality index was not updated. As a consequence, an\nexact search for the re-added attribute value did not return the entry. The\nlogic of the index code has been modified to update the index if at least\none of the values in the entry changes, and the exact search for the\nre-added attribute value now returns the correct entry. (BZ#1290726)\n\n* Prior to this update, when the cleanAllRUV task was running, a bogus\nattrlist_replace error message was logged repeatedly due to a memory\ncorruption. With this update, the appropriate memory copy function memmove\nis used, which fixes the memory corruption. As a result, the error messages\nare no longer logged in this scenario. (BZ#1295684)\n\n* To fix a simple paged results bug, an exclusive lock on a connection was\npreviously added. This consequently caused a self deadlock in a particular\ncase. With this update, the exclusive lock on a connection has been changed\nto the re-entrant type, and the self deadlock no longer occurs.\n(BZ#1298105)\n\n* Previously, an unnecessary lock was sometimes acquired on a connection\nobject, which could consequently cause a deadlock. A patch has been applied\nto remove the unnecessary locking, and the deadlock no longer occurs.\n(BZ#1299346)\n\nUsers of 389-ds-base are advised to upgrade to these updated packages,\nwhich correct these issues. After installing this update, the 389 server\nservice will be restarted automatically.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0204",
"url": "https://access.redhat.com/errata/RHSA-2016:0204"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1290725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290725"
},
{
"category": "external",
"summary": "1290726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290726"
},
{
"category": "external",
"summary": "1295684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1295684"
},
{
"category": "external",
"summary": "1299346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299346"
},
{
"category": "external",
"summary": "1299416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299416"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0204.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T09:42:10+00:00",
"generator": {
"date": "2024-11-22T09:42:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:0204",
"initial_release_date": "2016-02-16T10:47:59+00:00",
"revision_history": [
{
"date": "2016-02-16T10:47:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-02-16T10:47:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T09:42:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.4.0-26.el7_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.4.0-26.el7_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.4.0-26.el7_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.4.0-26.el7_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"product": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"product_id": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.4.0-26.el7_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0741",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2016-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1299416"
}
],
"notes": [
{
"category": "description",
"text": "An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: worker threads do not detect abnormally closed connections causing DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0741"
},
{
"category": "external",
"summary": "RHBZ#1299416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299416"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0741",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0741"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0741",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0741"
}
],
"release_date": "2016-01-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-16T10:47:59+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0204"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: worker threads do not detect abnormally closed connections causing DoS"
}
]
}
RHSA-2016:0204
Vulnerability from csaf_redhat - Published: 2016-02-16 10:47 - Updated: 2025-11-21 17:55Summary
Red Hat Security Advisory: 389-ds-base security and bug fix update
Severity
Important
Notes
Topic: Updated 389-ds-base packages that fix one security issue and several bugs
are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server.
The base packages include the Lightweight Directory Access Protocol (LDAP)
server and command-line utilities for server administration.
An infinite-loop vulnerability was discovered in the 389 directory server,
where the server failed to correctly handle unexpectedly closed client
connections. A remote attacker able to connect to the server could use this
flaw to make the directory server consume an excessive amount of CPU and
stop accepting connections (denial of service). (CVE-2016-0741)
This update fixes the following bugs:
* Previously, if a simple paged results search failed in the back end, the
simple paged results slot was not released. Consequently, the simple paged
results slots in a connection object could be accumulated. With this
update, the simple paged results slot is released correctly when a search
fails, and unused simple paged results slots are no longer left in a
connection object. (BZ#1290725)
* Previously, when several values of the same attribute were deleted using
the ldapmodify command, and at least one of them was added again during the
same operation, the equality index was not updated. As a consequence, an
exact search for the re-added attribute value did not return the entry. The
logic of the index code has been modified to update the index if at least
one of the values in the entry changes, and the exact search for the
re-added attribute value now returns the correct entry. (BZ#1290726)
* Prior to this update, when the cleanAllRUV task was running, a bogus
attrlist_replace error message was logged repeatedly due to a memory
corruption. With this update, the appropriate memory copy function memmove
is used, which fixes the memory corruption. As a result, the error messages
are no longer logged in this scenario. (BZ#1295684)
* To fix a simple paged results bug, an exclusive lock on a connection was
previously added. This consequently caused a self deadlock in a particular
case. With this update, the exclusive lock on a connection has been changed
to the re-entrant type, and the self deadlock no longer occurs.
(BZ#1298105)
* Previously, an unnecessary lock was sometimes acquired on a connection
object, which could consequently cause a deadlock. A patch has been applied
to remove the unnecessary locking, and the deadlock no longer occurs.
(BZ#1299346)
Users of 389-ds-base are advised to upgrade to these updated packages,
which correct these issues. After installing this update, the 389 server
service will be restarted automatically.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).
5.0 ()
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0204
References
| URL | Category | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated 389-ds-base packages that fix one security issue and several bugs\nare now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server.\nThe base packages include the Lightweight Directory Access Protocol (LDAP)\nserver and command-line utilities for server administration.\n\nAn infinite-loop vulnerability was discovered in the 389 directory server,\nwhere the server failed to correctly handle unexpectedly closed client\nconnections. A remote attacker able to connect to the server could use this\nflaw to make the directory server consume an excessive amount of CPU and\nstop accepting connections (denial of service). (CVE-2016-0741)\n\nThis update fixes the following bugs:\n\n* Previously, if a simple paged results search failed in the back end, the\nsimple paged results slot was not released. Consequently, the simple paged\nresults slots in a connection object could be accumulated. With this\nupdate, the simple paged results slot is released correctly when a search\nfails, and unused simple paged results slots are no longer left in a\nconnection object. (BZ#1290725)\n\n* Previously, when several values of the same attribute were deleted using\nthe ldapmodify command, and at least one of them was added again during the\nsame operation, the equality index was not updated. As a consequence, an\nexact search for the re-added attribute value did not return the entry. The\nlogic of the index code has been modified to update the index if at least\none of the values in the entry changes, and the exact search for the\nre-added attribute value now returns the correct entry. (BZ#1290726)\n\n* Prior to this update, when the cleanAllRUV task was running, a bogus\nattrlist_replace error message was logged repeatedly due to a memory\ncorruption. With this update, the appropriate memory copy function memmove\nis used, which fixes the memory corruption. As a result, the error messages\nare no longer logged in this scenario. (BZ#1295684)\n\n* To fix a simple paged results bug, an exclusive lock on a connection was\npreviously added. This consequently caused a self deadlock in a particular\ncase. With this update, the exclusive lock on a connection has been changed\nto the re-entrant type, and the self deadlock no longer occurs.\n(BZ#1298105)\n\n* Previously, an unnecessary lock was sometimes acquired on a connection\nobject, which could consequently cause a deadlock. A patch has been applied\nto remove the unnecessary locking, and the deadlock no longer occurs.\n(BZ#1299346)\n\nUsers of 389-ds-base are advised to upgrade to these updated packages,\nwhich correct these issues. After installing this update, the 389 server\nservice will be restarted automatically.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0204",
"url": "https://access.redhat.com/errata/RHSA-2016:0204"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1290725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290725"
},
{
"category": "external",
"summary": "1290726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290726"
},
{
"category": "external",
"summary": "1295684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1295684"
},
{
"category": "external",
"summary": "1299346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299346"
},
{
"category": "external",
"summary": "1299416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299416"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0204.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:55:02+00:00",
"generator": {
"date": "2025-11-21T17:55:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0204",
"initial_release_date": "2016-02-16T10:47:59+00:00",
"revision_history": [
{
"date": "2016-02-16T10:47:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-02-16T10:47:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:55:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.4.0-26.el7_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.4.0-26.el7_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.4.0-26.el7_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.4.0-26.el7_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"product": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"product_id": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.4.0-26.el7_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"product": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"product_id": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.4.0-26.el7_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.src",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0741",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2016-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1299416"
}
],
"notes": [
{
"category": "description",
"text": "An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: worker threads do not detect abnormally closed connections causing DoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0741"
},
{
"category": "external",
"summary": "RHBZ#1299416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299416"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0741",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0741"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0741",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0741"
}
],
"release_date": "2016-01-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-16T10:47:59+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0204"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Client-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Client-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7ComputeNode-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7ComputeNode-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Server-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Server-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.src",
"7Workstation-optional-7.2.Z:389-ds-base-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-debuginfo-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-devel-0:1.3.4.0-26.el7_2.x86_64",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.ppc64le",
"7Workstation-optional-7.2.Z:389-ds-base-libs-0:1.3.4.0-26.el7_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: worker threads do not detect abnormally closed connections causing DoS"
}
]
}
CNVD-2016-00998
Vulnerability from cnvd - Published: 2016-02-16
VLAI Severity ?
Title
Red Hat 389 Directory Server拒绝服务漏洞
Description
Red Hat 389 Directory Server是一款企业级的Linux目录服务器。
Red Hat 389 Directory Server存在安全漏洞，允许攻击者可利用该漏洞进行拒绝服务攻击。
Severity
中
Patch Name
Red Hat 389 Directory Server拒绝服务漏洞的补丁
Patch Description
Red Hat 389 Directory Server是一款企业级的Linux目录服务器。
Red Hat 389 Directory Server存在安全漏洞，允许攻击者可利用该漏洞进行拒绝服务攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下厂商提供的安全补丁以修复该漏洞： http://www.redhat.com/
Reference
http://www.securityfocus.com/bid/82343
Impacted products
| Name | Red Hat 389 Directory Server |
|---|
{
"bids": {
"bid": {
"bidNumber": "82343"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2016-0741"
}
},
"description": "Red Hat 389 Directory Server\u662f\u4e00\u6b3e\u4f01\u4e1a\u7ea7\u7684Linux\u76ee\u5f55\u670d\u52a1\u5668\u3002\r\n\r\nRed Hat 389 Directory Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdb\u884c\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002",
"discovererName": "Red Hat",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://www.redhat.com/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-00998",
"openTime": "2016-02-16",
"patchDescription": "Red Hat 389 Directory Server\u662f\u4e00\u6b3e\u4f01\u4e1a\u7ea7\u7684Linux\u76ee\u5f55\u670d\u52a1\u5668\u3002\r\n\r\nRed Hat 389 Directory Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdb\u884c\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Red Hat 389 Directory Server\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Red Hat 389 Directory Server"
},
"referenceLink": "http://www.securityfocus.com/bid/82343",
"serverity": "\u4e2d",
"submitTime": "2016-02-08",
"title": "Red Hat 389 Directory Server\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}
FKIE_CVE-2016-0741
Vulnerability from fkie_nvd - Published: 2016-04-19 21:59 - Updated: 2025-04-12 10:46
Severity ?
Summary
slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html | Patch, Vendor Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-0204.html | ||
| secalert@redhat.com | http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html | ||
| secalert@redhat.com | http://www.securityfocus.com/bid/82343 | ||
| secalert@redhat.com | https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/ | ||
| secalert@redhat.com | https://fedorahosted.org/389/ticket/48412 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-0204.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/82343 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://fedorahosted.org/389/ticket/48412 |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| redhat | enterprise_linux | 7.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_hpc_node | 7.0 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| fedoraproject | 389_directory_server | 1.3.4.0 | |
| fedoraproject | 389_directory_server | 1.3.4.1 | |
| fedoraproject | 389_directory_server | 1.3.4.4 | |
| fedoraproject | 389_directory_server | 1.3.4.5 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3C84489B-B08C-4854-8A12-D01B6E45CF79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CA30F3F3-3384-4E46-B51F-FCAF43728779",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2AC25FDF-B453-471A-84B7-AFA08B6039CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C78CE214-54CB-4ECC-B45D-CFABF249E1E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fedoraproject:389_directory_server:1.3.4.5:*:*:*:*:*:*:*",
"matchCriteriaId": "6CCA8C87-70FF-488E-9A3F-26D77323AB75",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection."
},
{
"lang": "es",
"value": "slapd/connection.c en 389 Directory Server (anteriormente Fedora Directory Server) 1.3.4.x en versiones anteriores a 1.3.4.7 permite a atacantes remotos causar una denegaci\u00f3n de servicio (bucle infinito y bloqueo de conexion) aprovech\u00e1ndose de una conexi\u00f3n cerrada de manera an\u00f3mala."
}
],
"id": "CVE-2016-0741",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-04-19T21:59:06.973",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/82343"
},
{
"source": "secalert@redhat.com",
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"source": "secalert@redhat.com",
"url": "https://fedorahosted.org/389/ticket/48412"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0204.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/82343"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://fedorahosted.org/389/ticket/48412"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-399"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…