The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Openldap | — | Upgrade macOS to the latest version | Mar 29, 2016 | Sep 11, 2015 |
| Centos_linux | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldap-serversUpgrade compat-openldapUpgrade openldap-servers-overlaysUpgrade openldap-servers-sqlUpgrade openldap | Dec 1, 2016 | Sep 11, 2015 |
| Debian | — | Upgrade openldap | Jul 30, 2024 | Sep 11, 2015 |
| Freebsd | — | Upgrade openldap-server | Dec 10, 2025 | Sep 12, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Sep 11, 2015 |
| Oracle_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-servers-overlaysUpgrade openldapUpgrade openldap-clientsUpgrade openldap-serversUpgrade compat-openldapUpgrade openldap-devel | Oct 16, 2024 | Sep 11, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 9, 2015 |
| Suse | — | Upgrade libldap-openssl1-2_4-2-x86Upgrade openldap2Upgrade openldap2-develUpgrade sles11sp4-docker-imageUpgrade openldap2-ppolicy-check-passwordUpgrade libldap-dataUpgrade libldap-2_4-2-x86Upgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-devel-32bitUpgrade openldap2-clientUpgrade compat-libldap-2_3-0Upgrade openldap2-devel-staticUpgrade libldap-2_4-2Upgrade openldap2-back-perlUpgrade libldap-2_4-2-32bitUpgrade libldap-openssl1-2_4-2Upgrade openldap2-docUpgrade openldap2-back-meta | Feb 2, 2016 | Sep 11, 2015 |
| Ubuntu | — | Upgrade slapd | Nov 8, 2024 | Sep 11, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub