CVE-2008-2930
First published: Fri Jul 04 2008(Updated: )
It was discovered that Red Hat Directory Server and Fedora Directory Server is prone to a temporary denial of service attack (high CPU usage) via crafted LDAP search patterns. LDAP search patterns are internally translated to regular expressions. If the regular expression is matched against specially crafted record already stored in the LDAP, it may cause regular expression NFA to iterate over large amount of states, causing one slapd thread to occupy CPU for excessive amount of time. Additionally, due to a current design of the regular expression handling code, only one slapd thread can execute regular expression NFA code at the time. Because of that, during the processing of such CPU intensive search request, all other search requests using patterns are blocked. Affected version: Red Hat Directory Server 7.1 and 8 Fedora Directory Server 1.1.1
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat 389 Directory Server | =1.1.1 | |
| Red Hat Directory Server | =7.1-sp1 | |
| Red Hat Directory Server | =7.1-sp2 | |
| Red Hat Directory Server | =7.1-sp3 | |
| Red Hat Directory Server | =7.1-sp4 | |
| Red Hat Directory Server | =7.1-sp5 | |
| Red Hat Directory Server | =7.1-sp6 | |
| Red Hat Directory Server | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html
- https://bugzilla.redhat.com/show_bug.cgi?id=454065
- https://rhn.redhat.com/errata/RHSA-2008-0596.html
- http://www.securityfocus.com/bid/30871
- http://securitytracker.com/id?1020773
- http://www.redhat.com/support/errata/RHSA-2008-0602.html
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861
- http://secunia.com/advisories/31627
- http://secunia.com/advisories/31702
- http://secunia.com/advisories/31565
- http://www.redhat.com/support/errata/RHSA-2008-0858.html
- http://secunia.com/advisories/31867
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html
- http://www.vupen.com/english/advisories/2008/2480
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44733
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078
- http://errata.devel.redhat.com/errata/show/7676
Frequently Asked Questions
What is the severity of CVE-2008-2930?
CVE-2008-2930 has a high severity rating due to its potential for causing a temporary denial of service through high CPU usage.
How do I fix CVE-2008-2930?
To fix CVE-2008-2930, you should update your Red Hat Directory Server or Fedora Directory Server to the latest patched version as recommended by Red Hat.
What versions are affected by CVE-2008-2930?
CVE-2008-2930 affects Red Hat Directory Server versions 7.1 (SP1 to SP6) and 8.0, as well as Fedora Directory Server version 1.1.1.
What type of attack does CVE-2008-2930 involve?
CVE-2008-2930 involves a denial of service attack that exploits crafted LDAP search patterns leading to excessive CPU usage.
What are the implications of CVE-2008-2930 for my server's security?
The implications of CVE-2008-2930 include potential downtime and degraded performance of services utilizing the affected directory servers.
- agent/type
- agent/first-publish-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-2930
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/fedora
- canonical/red hat 389 directory server
- version/red hat 389 directory server/1.1.1
- vendor/redhat
- canonical/red hat directory server
- version/red hat directory server/7.1-sp1
- version/red hat directory server/7.1-sp2
- version/red hat directory server/7.1-sp3
- version/red hat directory server/7.1-sp4
- version/red hat directory server/7.1-sp5
- version/red hat directory server/7.1-sp6
- version/red hat directory server/8.0