CVE-2017-2591 Memory corruption in 389-ds-base

What is CVE-2017-2591?

CVE-2017-2591 is a low-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 30 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service.

Weakness: CWE-125, CWE-122

Which versions are affected by CVE-2017-2591?

It affects 2 products.

Products include Fedoraproject 389 Directory Server, Redhat Enterprise Linux.

How do I fix CVE-2017-2591?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2017-2591 being exploited?

There is no known exploitation of CVE-2017-2591 in the wild and no public exploit code.

Other vulnerabilities in Redhat Enterprise Linux

• CVE-2017-7551 Information disclosure in 389-ds-base Critical 9.8
• CVE-2017-15135 Auth bypass in 389-ds-base High 8.1
• CVE-2019-10171 Denial of service in 389-ds-base High 7.5
• CVE-2018-14638 Denial of service in 389-ds-base High 7.5
• CVE-2018-1054 Denial of service in 389-ds-base High 7.5

All Redhat Enterprise Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2017-2591, GHSA-cmhq-25mx-42j8, MGASA-2017-0028, UBUNTU-CVE-2017-2591.