openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (CVE-2017-9287)
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a
double free vulnerability. A user with access to search the
directory can crash slapd by issuing a search including the Paged
Results control with a page size of 0.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-9287
Patch:
(from redmine: issue id 7360, created on 2017-06-01, closed on 2017-06-15)
- Relations:
- child #7361 (closed)
- child #7362 (closed)
- child #7363 (closed)
- child #7364 (closed)
- child #7365 (closed)
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information