servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openldap | Aug 30, 2017 | May 29, 2017 | |
| Centos_linux | — | centos-upgrade-openldapcentos-upgrade-openldap-clientscentos-upgrade-openldap-debuginfocentos-upgrade-openldap-develcentos-upgrade-openldap-serverscentos-upgrade-openldap-servers-sql | Aug 28, 2019 | May 29, 2017 |
| Debian | debian-upgrade-openldap | Jun 1, 2017 | May 29, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-openldaphuawei-euleros-2_0_sp1-upgrade-openldap-clientshuawei-euleros-2_0_sp1-upgrade-openldap-develhuawei-euleros-2_0_sp1-upgrade-openldap-servers | Nov 30, 2017 | May 29, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openldaphuawei-euleros-2_0_sp2-upgrade-openldap-clientshuawei-euleros-2_0_sp2-upgrade-openldap-develhuawei-euleros-2_0_sp2-upgrade-openldap-servers | Nov 30, 2017 | May 29, 2017 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | May 29, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-openldaporacle-linux-upgrade-openldap-clientsoracle-linux-upgrade-openldap-develoracle-linux-upgrade-openldap-serversoracle-linux-upgrade-openldap-servers-sql | Aug 8, 2017 | May 17, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-openldapredhat-upgrade-openldap-clientsredhat-upgrade-openldap-debuginforedhat-upgrade-openldap-develredhat-upgrade-openldap-serversredhat-upgrade-openldap-servers-sql | Aug 4, 2017 | May 29, 2017 | |
| Suse | — | suse-upgrade-compat-libldap-2_3-0suse-upgrade-libldap-2_4-2suse-upgrade-libldap-2_4-2-32bitsuse-upgrade-openldap2suse-upgrade-openldap2-back-metasuse-upgrade-openldap2-back-perlsuse-upgrade-openldap2-clientsuse-upgrade-openldap2-develsuse-upgrade-openldap2-devel-staticsuse-upgrade-openldap2-docsuse-upgrade-sles12sp2-docker-image | Jun 15, 2017 | May 29, 2017 |
| Ubuntu | ubuntu-upgrade-slapd | Jun 1, 2017 | May 29, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub