CyberRota Analysis
AI-GeneratedA heap-buffer-overflow vulnerability exists in the 389 Directory Server, allowing unauthenticated remote attackers to exploit the DN normalization process by sending specially crafted LDAP operations. This can lead to heap memory corruption and potential denial of service. Organizations using 389 Directory Server should prioritize addressing this issue to mitigate the risk of service disruption.
Original NVD Description
A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN) that contains a legacy-quoted value encoding a multivalued nested Relative Distinguished Name (RDN), the server can write past the end of a heap allocation while sorting RDN attribute-value pairs. An unauthenticated remote attacker can trigger this condition by sending an LDAP operation whose DN reaches the DN normalization routine, such as a search with a crafted base DN. This can corrupt heap memory and may cause denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)