CVE:CVE-2017-9287
CNNVD:CNNVD-201705-1370
OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议（LDAP）的自由和开源实现，它已被包含在Linux发行版中。
OpenLDAP 2.4.44及之前的版本中的servers/slapd/back-mdb/search.c文件存在双重释放漏洞。攻击者可利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade openldap openldap to a higher version than 2.4.44,and avoid the version (,2.4.44]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade mcafee policy_auditor to a higher version than 6.5.1,and avoid the version (,6.5.1); Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2)