CVE-2014-8182

2020-01-0222:20:44

redhat

www.cve.org

0.281 Low

EPSS

Percentile

96.9%

JSON

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

CNA Affected

[
  {
    "product": "openldap",
    "vendor": "openldap",
    "versions": [
      {
        "status": "affected",
        "version": "2.4"
      }
    ]
  }
]