Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.120654
Category:Amazon Linux Local Security Checks
Title:Amazon Linux: Security Advisory (ALAS-2016-664)
Summary:The remote host is missing an update for the '389-ds-base' package(s) announced via the ALAS-2016-664 advisory.
Description:Summary:
The remote host is missing an update for the '389-ds-base' package(s) announced via the ALAS-2016-664 advisory.

Vulnerability Insight:
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).

Affected Software/OS:
'389-ds-base' package(s) on Amazon Linux.

Solution:
Please install the updated package(s).

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-0741
BugTraq ID: 82343
http://www.securityfocus.com/bid/82343
RedHat Security Advisories: RHSA-2016:0204
http://rhn.redhat.com/errata/RHSA-2016-0204.html
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.