REDHAT-BUG-1195729: Medium severity red hat directory server vulnerability
It was discovered that the slapi-nis Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for information about a group with many members, or a request for a user that belongs to a large number of groups, would cause a Directory Server to enter an infinite loop and consume an excessive amount of CPU time.
Acknowledgements:
This issue was discovered by Sumit Bose of Red Hat.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1195729?
The severity of REDHAT-BUG-1195729 is considered high due to potential denial of service risks.
How do I fix REDHAT-BUG-1195729?
To fix REDHAT-BUG-1195729, apply the latest security patches provided by Red Hat for the Directory Server software.
What is the impact of REDHAT-BUG-1195729?
The impact of REDHAT-BUG-1195729 includes possible service disruption when handling requests for user accounts with a high number of groups.
Which version of Red Hat Directory Server is affected by REDHAT-BUG-1195729?
All versions of Red Hat Directory Server that include the slapi-nis Directory Server plug-in are affected by REDHAT-BUG-1195729.
Is there a workaround for REDHAT-BUG-1195729?
Currently, no official workaround for REDHAT-BUG-1195729 is documented; applying patches is recommended.