Amazon Linux AMI Security Advisory: ALAS-2016-664
Advisory Release Date: 2016-03-10 16:30 Pacific
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).
Run yum update 389-ds-base to update your system.