The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Directory_server | Redhat | 8.0 (including) | 8.0 (including) |
| 389_directory_server | Redhat | - (including) | - (including) |