Candidate: CVE-2016-0741
PublicDate: 2016-04-19 21:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0741
 https://rhn.redhat.com/errata/RHSA-2016-0204.html
 https://pagure.io/389-ds-base/issue/48412
 https://github.com/389ds/389-ds-base/issues/1743
Description:
 slapd/connection.c in 389 Directory Server (formerly Fedora Directory
 Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of
 service (infinite loop and connection blocking) by leveraging an abnormally
 closed connection.
Ubuntu-Description:
Notes:
 leosilva> code is quite different in trusty than patch, probably a trick backport.
 ebarretto> only affects 1.3.4 and up
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]

Patches_389-ds-base:
 upstream: https://pagure.io/389-ds-base/c/30c4852a3d9ca527b78c0f89df5909bc9a268392
 upstream: https://github.com/389ds/389-ds-base/commit/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2
upstream_389-ds-base: released (1.3.4.7)
precise_389-ds-base: ignored (reached end-of-life)
precise/esm_389-ds-base: DNE (precise was needs-triage)
trusty_389-ds-base: not-affected (code not present)
trusty/esm_389-ds-base: DNE (trusty was not-affected [code not present])
vivid/stable-phone-overlay_389-ds-base: DNE
vivid/ubuntu-core_389-ds-base: DNE
wily_389-ds-base: ignored (reached end-of-life)
xenial_389-ds-base: not-affected (1.3.4.9-1)
yakkety_389-ds-base: ignored (reached end-of-life)
zesty_389-ds-base: ignored (reached end-of-life)
artful_389-ds-base: released (1.3.7.5-1)
bionic_389-ds-base: not-affected (1.3.7.10-1ubuntu1)
cosmic_389-ds-base: ignored (reached end-of-life)
disco_389-ds-base: ignored (reached end-of-life)
eoan_389-ds-base: ignored (reached end-of-life)
focal_389-ds-base: not-affected (1.4.3.6-2)
groovy_389-ds-base: ignored (reached end-of-life)
hirsute_389-ds-base: not-affected (1.4.4.11-1)
impish_389-ds-base: not-affected (1.4.4.11-2build)
jammy_389-ds-base: not-affected (2.0.11-2)
devel_389-ds-base: not-affected (2.0.11-2)