SB2012062901 - Buffer overflow in OpenLDAP

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2012062901

SB2012062901 - Buffer overflow in OpenLDAP

Published: June 29, 2012 Updated: July 28, 2020

Security Bulletin ID SB2012062901
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Buffer overflow (CVE-ID: CVE-2012-1164)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote non-authenticated attacker to perform service disruption.

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.


Remediation

Install update from vendor's website.

References