CVE-2017-2591

CVE-2017-2591 is a high-severity vulnerability affecting 389 Directory Server versions prior to 1.3.6, including those in Fedora and Red Hat Enterprise Linux. It stems from an improperly NULL-terminated array in the "attribute uniqueness" plugin, allowing an attacker to trigger an out-of-bounds heap memory read. This can lead to a denial of service by crashing the LDAP service, with a CVSS score of 7.5. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability is easily exploitable over the network with low attack complexity.