CVE-2017-15134 Amazon Linux Security Advisory for 389-ds-base: ALAS2-2018-955

Remote DoS via search filters in slapi_filter_sprintf in slapd/util.cA stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service. (CVE-2017-15134 )

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.

Please refer to Amazon advisory ALAS-2018-955 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

ALAS-2018-955: Amazon Linux (389-ds-base (1.3.6.1-26.amzn2.0.1) on src)

ALAS-2018-955: Amazon Linux (389-ds-base (1.3.6.1-26.amzn2.0.1) on x86_64)