Package: slapd
Version: 2.4.44+dfsg-4
Severity: important
Tags: security fixed-upstream
Control: forwarded -1 http://www.openldap.org/its/?findid=8655
Control: found -1 2.4.40+dfsg-1+deb8u2
Control: found -1 2.4.31-2+deb7u2

Karsten Heymann discovered that a user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0. Opening a bug for tracking in Debian now that the ITS is public.

Reply via email to