Red Hat Directory Server 7.1 before SP7 Red Hat Directory Server 8 and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns related to a single-threaded regular-expression subsystem.