slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Openldap | — | Apply OS X security update 2009-006 | Dec 16, 2011 | Feb 13, 2008 |
| Freebsd | — | Upgrade openldap-server | Dec 10, 2025 | Feb 22, 2008 |
| Gentoo Linux | — | Upgrade net-nds/openldap. | Oct 30, 2017 | Feb 13, 2008 |
| Oracle_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-develUpgrade openldapUpgrade openldap-clientsUpgrade compat-openldapUpgrade openldap-servers | Oct 16, 2024 | Feb 13, 2008 |
| Suse | — | Upgrade openldap2-develUpgrade openldap2-clientUpgrade openldap2-client-x86Upgrade openldap2-client-64bitUpgrade openldap2-back-ldapUpgrade openldap2-devel-64bitUpgrade openldap2Upgrade suse-releaseUpgrade openldap2-back-perlUpgrade openldap2-back-monitorUpgrade openldap2-client-32bitUpgrade openldap2-devel-32bitUpgrade openldap2-back-meta | Feb 17, 2015 | Feb 13, 2008 |
| Ubuntu | — | Upgrade slapd | Nov 8, 2024 | Feb 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub