Double free error in OpenLDAP - CVE-2017-9287
Published: May 31, 2017 / Updated: June 2, 2017
Vulnerability identifier: #VU6842
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-9287
CWE-ID: CWE-415
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a double free error within servers/slapd/back-mdb/search.c when processing search requests, which include the Paged Results control with a page size of 0. A remote authenticated attacker can issue a directory search and crash the slapd daemon.
Successful exploitation of the vulnerability may allow a remote authenticated attacker to perform a denial of service (DoS) attack.
Affected software
OpenLDAP
Debian Linux
Red Hat Enterprise Linux Server
Ubuntu
Fedora
openldap (Alpine package)
openldap
Debian Linux
Red Hat Enterprise Linux Server
Ubuntu
Fedora
openldap (Alpine package)
openldap
How to mitigate CVE-2017-9287
Update to version 2.4.45.
openldap (Alpine package) - addressed in versions 2.4.44-r1, 2.4.44-r2
openldap - update to 2.4.44-11.fc25
openldap - update to 2.4.44-11.fc25