PT-2018-1987 · Astra Linux · Astra Linux

Published

2018-08-24

·

Updated

2018-08-24

CVSS v2.0

1.7

Low

VectorAV:N/AC:H/Au:M/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Astra Linux (affected versions not specified)
Description The issue is related to an error in assigning access rights to cache files of mandatory attributes in the Astra Linux Directory (ALD) service of the Astra Linux operating system, leading to their constant recreation. An attacker can exploit this issue by sending specially crafted requests, resulting in the generation of excessive network traffic, which can cause a denial of service of the slapd service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2018-01603

Affected Products

Astra Linux