CVE-2015-1546

2015-02-1216:59:07

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.028 Low

EPSS

Percentile

90.7%

JSON

Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.

OSVersionArchitecturePackageVersionFilename
Debian12allopenldap< 2.4.40-4openldap_2.4.40-4_all.deb
Debian11allopenldap< 2.4.40-4openldap_2.4.40-4_all.deb
Debian10allopenldap< 2.4.40-4openldap_2.4.40-4_all.deb
Debian999allopenldap< 2.4.40-4openldap_2.4.40-4_all.deb
Debian13allopenldap< 2.4.40-4openldap_2.4.40-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openldap	< 2.4.40-4	openldap_2.4.40-4_all.deb
Debian	11	all	openldap	< 2.4.40-4	openldap_2.4.40-4_all.deb
Debian	10	all	openldap	< 2.4.40-4	openldap_2.4.40-4_all.deb
Debian	999	all	openldap	< 2.4.40-4	openldap_2.4.40-4_all.deb
Debian	13	all	openldap	< 2.4.40-4	openldap_2.4.40-4_all.deb