Re: [FD] OpenLDAP ber_get_next Denial of Service

Why are they labelling this 'minor' and not issuing a fix? I could use the oneliner in this advisory to kill the vanilla OpenLDAP on my Ubuntu box. Remotely. A remote unauthenticated DoS against a directory server is /not/ minor, IMHO. On 10-09-15 07:34, Denis Andzakovic wrote: > ( , ) (, > . '.' ) ('. ', > ). , ('. ( ) ( > (_,) .'), ) _ _, > / _____/ / _ \ ____ ____ _____ > \____ \= /_\ \ _/ ___\/ _ \ / \ > / \/ | \\ \__( <_> ) Y Y \ > /______ /\___|__ / \___ >____/|__|_| / > \/ \/.-. \/ \/:wq > (x.0) > '=w|.=' > _=''"''=. > > presents.. > OpenLDAP get_ber_next Denial of Service > Affected Versions: OpenLDAP <=.4.42 > > PDF: http://ift.tt/1EZRMzx > >

Source: Gmail -> IFTTT-> Blogger