Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat目录服务器LDAP查询缓冲区错误漏洞
Vulnerability Description
Red Hat Directory Server是美国红帽(Red Hat)公司的一款商业版Linux目录服务器。 Red Hat目录服务器使用固定大小的缓冲区储存LDAP搜索中所使用的正则表达式,在将用户提供的LDAP请求中的搜索模式翻译成正则表达式时可能会触发缓冲区溢出,导致slapd守护程序崩溃或执行任意代码。任何可以执行LDAP搜索的用户都可以触发这个溢出,如果ACL允许匿名访问(默认配置)的话也包括匿名用户。
CVSS Information
N/A
Vulnerability Type
N/A