CVE-2017-14159
Medium
Description
slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by openldap-initscript.
SeverityMedium
CVSS4.7
Exploit probability—
Product
Openldap
PublishedSep 5, 2017
First seenSep 5, 2017
How to fix
Update
- oracle blockchain_platform21.1.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openldap openldap | v ≤ 2.4.45 | — |
| oracle blockchain_platform | v < 21.1.2 | 21.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.