CVE-2012-2697: Input Validation
Due to a problem with the patch used to correct a problem with LDAP servers not correctly returning an opaque cookie to check for additional results when getting paged results from a server on 64-bit PowerPC and IBM System z platforms (RHBA-2012:0264), it was possible for a user to cause a denial of service of the autofs service. While this may not impact mounts that have already been mounted (other than preventing mount expiration), it will prevent any future mount requests from being processed until autofs is restarted.
Other sources
Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux (RHEL) 5, allows local users to cause a denial of service (autofs crash and delayed mounts) or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2697?
CVE-2012-2697 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2012-2697?
To fix CVE-2012-2697, you should apply the latest security updates provided by Red Hat for your version of Enterprise Linux.
What platforms are affected by CVE-2012-2697?
CVE-2012-2697 affects 64-bit PowerPC and IBM System z platforms running Red Hat Enterprise Linux 5.
What types of attacks can exploit CVE-2012-2697?
CVE-2012-2697 can be exploited to cause a denial of service by manipulating LDAP server responses.
When was CVE-2012-2697 first reported?
CVE-2012-2697 was first reported in 2012 following issues with LDAP server paging results.