PT-2017-8641 · Red Hat+1 · Red Hat Enterprise Linux Server+6

Adam Mariš · Publicado 2016-10-21 · Atualizado 2024-06-15 · CVE-2016-4992

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7

Description The issue allows remote attackers to infer the existence of RDN component objects in 389 Directory Server.

Recommendations For Red Hat Enterprise Linux Desktop versions 6 through 7, update to a version that includes the fix for this issue. For Red Hat Enterprise Linux HPC Node versions 6 through 7, update to a version that includes the fix for this issue. For Red Hat Enterprise Linux Server versions 6 through 7, update to a version that includes the fix for this issue. For Red Hat Enterprise Linux Workstation versions 6 through 7, update to a version that includes the fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CESA-2016_2594

CESA-2016_2765

CVE-2016-4992

MGASA-2016-0350

OPENSUSE-SU-2024:10593-1

RHSA-2016:2594

RHSA-2016:2765

RHSA-2016_2594

RHSA-2016_2765

Produtos afetados

389 Directory Server

Centos

Red Hat

Red Hat Enterprise Linux Desktop

Red Hat Enterprise Linux Hpc Node

Red Hat Enterprise Linux Server

Red Hat Enterprise Linux Workstation

Referências · 30

• https://github.com/389ds/389-ds-base/commit/0b932d4b926d46ac5060f02617330dc444e06da1 · Nota
• https://advisories.mageia.org/MGASA-2016-0350.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-10871 · Nota
• https://suse.com/security/cve/CVE-2018-14624 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1347760 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4992 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-2765.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1054 · Nota
• https://suse.com/security/cve/CVE-2018-14648 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0350 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-2594.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-4992 · Nota
• https://suse.com/security/cve/CVE-2018-10935 · Nota
• http://rhn.redhat.com/errata/RHSA-2016-2765.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-4992 · Nota