CVE-2008-2930: Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allo...

Security readout for executives and security teams

This is a remote denial-of-service issue in older Red Hat and Fedora directory servers. Crafted LDAP searches can consume CPU in the regular-expression handling path and interrupt search service availability. The main business risk is disruption to authentication or directory-dependent applications, not data theft based on the supplied sources. Exposure is most likely in legacy environments still running the named Red Hat or Fedora directory server versions with LDAP reachable by untrusted users or networks. The supplied affected-product metadata is incomplete, so inventory confirmation is required. Prioritize if legacy LDAP infrastructure supports authentication, access control, or business-critical applications. The issue can interrupt directory searches remotely, but urgency depends on whether the affected products remain deployed and reachable. Mitigation focus: Upgrade Red Hat Directory Server 7.1 to SP7 or later where applicable.; Apply the relevant Red Hat or Fedora vendor advisory updates for deployed versions.; Review HP advisory SSRT080113 if HP-packaged directory software is present..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.