PT-2017-8641 · Red Hat+1 · Red Hat Enterprise Linux Server+6

Adam Mariš · Published 2016-10-21 · Updated 2024-06-15 · CVE-2016-4992

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7

Description The issue allows remote attackers to infer the existence of RDN component objects in 389 Directory Server.

Recommendations For Red Hat Enterprise Linux Desktop versions 6 through 7, update to a version that includes the fix for this issue. For Red Hat Enterprise Linux HPC Node versions 6 through 7, update to a version that includes the fix for this issue. For Red Hat Enterprise Linux Server versions 6 through 7, update to a version that includes the fix for this issue. For Red Hat Enterprise Linux Workstation versions 6 through 7, update to a version that includes the fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CESA-2016_2594

CESA-2016_2765

CVE-2016-4992

MGASA-2016-0350

OPENSUSE-SU-2024:10593-1

RHSA-2016:2594

RHSA-2016:2765

RHSA-2016_2594

RHSA-2016_2765

Affected Products

389 Directory Server

Centos

Red Hat

Red Hat Enterprise Linux Desktop

Red Hat Enterprise Linux Hpc Node

Red Hat Enterprise Linux Server

Red Hat Enterprise Linux Workstation

References · 30

• https://advisories.mageia.org/MGASA-2016-0350.html · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1347760 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4992 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-2765.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0350 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2594.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2765.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/D2LEPJLCLU4I6ROZM3NHIDSPKCZUF3DR · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4992 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-4992 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-2594.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4992 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-4992 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-4992 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10593-1 · Vendor Advisory