Bug 432008 (CVE-2008-0658)

Summary:	CVE-2008-0658 openldap: slapd crash on modrdn operation with NOOP control on entry in bdb storage
Product:	[Other] Security Response	Reporter:	Tomas Hoger <thoger>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	jplans, jsafrane
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-02-22 08:45:14 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	431405, 431406, 431407, 431408, 432012, 432013, 432014
Bug Blocks:

Description Tomas Hoger 2008-02-08 12:47:13 UTC

While preparing the patch for CVE-2007-6698 (issue allowing slapd daemon crash
using modify requests with NOOP control, tracked via bug bug #431203), it was
discovered, that similar crash can be achieved using modrdn operation with NOOP
control.

Upstream bug report:
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358

Patch applied in upstream CVS:
http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=h

Comment 3 Tomas Hoger 2008-02-08 13:39:02 UTC

Similar to CVE-2007-6698, this issue does not affect OpenLDAP packages as
shipped in Red Hat Enterprise Linux 2.1 and 3, as they do not support NOOP
controls.  Packages shipped in Red Hat Enterprise Linux 4 and 5 are affected.

Comment 4 Fedora Update System 2008-02-11 07:38:03 UTC

openldap-2.3.39-3.fc8 has been submitted as an update for Fedora 8

Comment 5 Fedora Update System 2008-02-11 07:39:01 UTC

openldap-2.3.34-7.fc7 has been submitted as an update for Fedora 7

Comment 6 Fedora Update System 2008-02-13 05:10:59 UTC

openldap-2.3.39-3.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2008-02-13 05:15:41 UTC

openldap-2.3.34-7.fc7 has been pushed to the Fedora 7 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 10 Red Hat Product Security 2008-02-22 08:45:14 UTC

This issue was addressed in:

Red Hat Enterprise Linux:
  http://rhn.redhat.com/errata/RHSA-2008-0110.html

Fedora:
  https://admin.fedoraproject.org/updates/F7/FEDORA-2008-1616
  https://admin.fedoraproject.org/updates/F8/FEDORA-2008-1568