servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | Aug 30, 2017 | May 29, 2017 |
| Centos_linux | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap-debuginfoUpgrade openldap-servers | Aug 28, 2019 | May 29, 2017 |
| Debian | — | Upgrade openldap | Jun 1, 2017 | May 29, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-devel | Nov 30, 2017 | May 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Nov 30, 2017 | May 29, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | May 29, 2017 |
| Oracle_linux | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-develUpgrade openldap-servers-sqlUpgrade openldap-clients | Aug 8, 2017 | May 17, 2017 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 17, 2017 |
| Redhat_linux | — | Upgrade openldap-serversUpgrade openldap-servers-sqlNo solution existsUpgrade openldap-develUpgrade openldap-clientsUpgrade openldapUpgrade openldap-debuginfo | Aug 4, 2017 | May 29, 2017 |
| Suse | — | Upgrade sles12sp2-docker-imageUpgrade openldap2-devel-staticUpgrade libldap-2_4-2Upgrade openldap2-back-metaUpgrade openldap2Upgrade libldap-2_4-2-32bitUpgrade openldap2-clientUpgrade openldap2-docUpgrade compat-libldap-2_3-0Upgrade openldap2-develUpgrade openldap2-back-perl | Jun 15, 2017 | May 29, 2017 |
| Ubuntu | — | Upgrade slapd | Jun 1, 2017 | May 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub