Lucene search

K
cve[email protected]CVE-2007-5708
HistoryOct 30, 2007 - 7:46 p.m.

CVE-2007-5708

2007-10-3019:46:00
CWE-399
web.nvd.nist.gov
31
2
openldap
proxy-caching
server
memory allocation
vulnerability
nvd
cve-2007-5708

6.1 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.023 Low

EPSS

Percentile

89.4%

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Social References

More

6.1 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.023 Low

EPSS

Percentile

89.4%