Test Kennung:	1.3.6.1.4.1.25623.1.0.809787
Kategorie:	Denial of Service
Titel:	OpenLDAP ber_get_next Denial of Service Vulnerability
Zusammenfassung:	OpenLDAP is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: OpenLDAP is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to an 'assert' function call within the ber_get_next method (io.c line 682) that is hit when decoding tampered BER data. Vulnerability Impact: Successful exploitation may allow remote attackers to cause the application to crash, creating a denial-of-service condition. Affected Software/OS: OpenLDAP versions 2.4.42 and prior. Solution: Upgrade to OpenLDAP version 2.4.43 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	BugTraq ID: 76714 Common Vulnerability Exposure (CVE) ID: CVE-2015-6908 http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://www.securityfocus.com/bid/76714 Debian Security Information: DSA-3356 (Google Search) http://www.debian.org/security/2015/dsa-3356 RedHat Security Advisories: RHSA-2015:1840 http://rhn.redhat.com/errata/RHSA-2015-1840.html http://www.securitytracker.com/id/1033534 SuSE Security Announcement: SUSE-SU-2016:0224 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html SuSE Security Announcement: SUSE-SU-2016:0262 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html SuSE Security Announcement: openSUSE-SU-2016:0226 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html SuSE Security Announcement: openSUSE-SU-2016:0255 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html SuSE Security Announcement: openSUSE-SU-2016:0261 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html http://www.ubuntu.com/usn/USN-2742-1
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.