CVE-2016-0741

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-19 · updated 2026-06-17
Weakness: CWE-399

Description

slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.

Affected products

Red Hat, Inc. 389-ds-base: 1.3.4.0, 1.3.4.1, 1.3.4.4, 1.3.4.5
Red Hat Enterprise Linux: 7.0
RedHat Enterprise Linux Desktop: 7.0
RedHat Enterprise Linux Hpc Node: 7.0
RedHat Enterprise Linux Server: 7.0
RedHat Enterprise Linux Workstation: 7.0

References

http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html
http://rhn.redhat.com/errata/RHSA-2016-0204.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.securityfocus.com/bid/82343
https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/
https://fedorahosted.org/389/ticket/48412
http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html
http://rhn.redhat.com/errata/RHSA-2016-0204.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.securityfocus.com/bid/82343
https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/
https://fedorahosted.org/389/ticket/48412

Get alerted when CVE-2016-0741 or the next vulnerability affects your stack