CVE-2014-8182

2020-01-0222:20:44

redhat

www.cve.org

EPSS

0.281

Percentile

96.9%

JSON

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

CNA Affected

[
  {
    "product": "openldap",
    "vendor": "openldap",
    "versions": [
      {
        "status": "affected",
        "version": "2.4"
      }
    ]
  }
]