contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | Nov 8, 2019 | Dec 18, 2017 |
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Feb 26, 2020 | Dec 18, 2017 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Oct 20, 2017 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6 | Jul 30, 2026 | Dec 18, 2017 |
| Suse | — | Upgrade openldap2-back-sockUpgrade libldap-2_4-2Upgrade openldap2-devel-32bitUpgrade openldap2-back-perlUpgrade openldap2Upgrade openldap2-contribUpgrade libldap-dataUpgrade openldap2-ppolicy-check-passwordUpgrade openldap2-devel-staticUpgrade openldap2-clientUpgrade libldap-2_4-2-32bitUpgrade openldap2-docUpgrade openldap2-develUpgrade openldap2-back-metaUpgrade compat-libldap-2_3-0Upgrade openldap2-back-sql | Dec 18, 2018 | Dec 18, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub