Memory Leak Vulnerability in 389 Directory Server by Red Hat
CVE-2010-4746

Currently unrated

Key Information:

Vendor
Fedoraproject
Status
389 Directory Server
Vendor
CVE Published:
23 February 2011

Summary

Multiple memory leaks have been identified in the normalization functionality of the 389 Directory Server, which can lead to Denial of Service (DoS) through excessive memory consumption. These leaks arise from improper handling in the Slapi_Attr normalization process, as well as ineffective pointer management within the syntax normalization code. This vulnerability allows remote attackers to exploit this flaw using poorly designed applications, compromising the server's stability.

References

http://directory.fedoraproject.org/wiki/Release_Notes
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=663597
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.