Threats tagged 'ghsa-m545-9vp4-qjrp'

A double-free vulnerability exists in 389-ds-base 3.x in the get_ldapmessage_controls_ext() function when processing a critical Session Tracking control during an unauthenticated BIND request. This causes heap corruption and can lead to denial of service on builds using the glibc allocator. Red Hat product builds using jemalloc are not reliably affected. No information disclosure or privilege escalation has been demonstrated.