Lucene search

[email protected]NVD:CVE-2007-5708

HistoryOct 30, 2007 - 7:46 p.m.

CVE-2007-5708

2007-10-3019:46:00

CWE-399

[email protected]

web.nvd.nist.gov

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

JSON

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Affected configurations

NVD

Node

openldapopenldapMatch1.0

openldapopenldapMatch1.0.1

openldapopenldapMatch1.0.2

openldapopenldapMatch1.0.3

openldapopenldapMatch1.1

openldapopenldapMatch1.1.0

openldapopenldapMatch1.1.1

openldapopenldapMatch1.1.2

openldapopenldapMatch1.1.3

openldapopenldapMatch1.1.4

openldapopenldapMatch1.2

openldapopenldapMatch1.2.0

openldapopenldapMatch1.2.1

openldapopenldapMatch1.2.2

openldapopenldapMatch1.2.3

openldapopenldapMatch1.2.4

openldapopenldapMatch1.2.5

openldapopenldapMatch1.2.6

openldapopenldapMatch1.2.7

openldapopenldapMatch1.2.8

openldapopenldapMatch1.2.9

openldapopenldapMatch1.2.10

openldapopenldapMatch1.2.11

openldapopenldapMatch1.2.12

openldapopenldapMatch1.2.13

openldapopenldapMatch2.0

openldapopenldapMatch2.0.0

openldapopenldapMatch2.0.1

openldapopenldapMatch2.0.2

openldapopenldapMatch2.0.3

openldapopenldapMatch2.0.4

openldapopenldapMatch2.0.5

openldapopenldapMatch2.0.6

openldapopenldapMatch2.0.7

openldapopenldapMatch2.0.8

openldapopenldapMatch2.0.9

openldapopenldapMatch2.0.10

openldapopenldapMatch2.0.11

openldapopenldapMatch2.0.11_9

openldapopenldapMatch2.0.11_11

openldapopenldapMatch2.0.11_11s

openldapopenldapMatch2.0.12

openldapopenldapMatch2.0.13

openldapopenldapMatch2.0.14

openldapopenldapMatch2.0.15

openldapopenldapMatch2.0.16

openldapopenldapMatch2.0.17

openldapopenldapMatch2.0.18

openldapopenldapMatch2.0.19

openldapopenldapMatch2.0.20

openldapopenldapMatch2.0.21

openldapopenldapMatch2.0.22

openldapopenldapMatch2.0.23

openldapopenldapMatch2.0.24

openldapopenldapMatch2.0.25

openldapopenldapMatch2.0.26

openldapopenldapMatch2.0.27

openldapopenldapMatch2.1.2

openldapopenldapMatch2.1.3

openldapopenldapMatch2.1.4

openldapopenldapMatch2.1.5

openldapopenldapMatch2.1.6

openldapopenldapMatch2.1.7

openldapopenldapMatch2.1.8

openldapopenldapMatch2.1.9

openldapopenldapMatch2.1.10

openldapopenldapMatch2.1.11

openldapopenldapMatch2.1.12

openldapopenldapMatch2.1.13

openldapopenldapMatch2.1.14

openldapopenldapMatch2.1.15

openldapopenldapMatch2.1.16

openldapopenldapMatch2.1.17

openldapopenldapMatch2.1.18

openldapopenldapMatch2.1.19

openldapopenldapMatch2.1.20

openldapopenldapMatch2.1.21

openldapopenldapMatch2.1.22

openldapopenldapMatch2.1.23

openldapopenldapMatch2.1.24

openldapopenldapMatch2.1.25

openldapopenldapMatch2.1.26

openldapopenldapMatch2.1.27

openldapopenldapMatch2.1.28

openldapopenldapMatch2.1.29

openldapopenldapMatch2.1.30

openldapopenldapMatch2.1_.20

openldapopenldapMatch2.2.0

openldapopenldapMatch2.2.1

openldapopenldapMatch2.2.4

openldapopenldapMatch2.2.5

openldapopenldapMatch2.2.6

openldapopenldapMatch2.2.7

openldapopenldapMatch2.2.8

openldapopenldapMatch2.2.9

openldapopenldapMatch2.2.10

openldapopenldapMatch2.2.11

openldapopenldapMatch2.2.12

openldapopenldapMatch2.2.13

openldapopenldapMatch2.2.14

openldapopenldapMatch2.2.15

openldapopenldapMatch2.2.16

openldapopenldapMatch2.2.17

openldapopenldapMatch2.2.18

openldapopenldapMatch2.2.19

openldapopenldapMatch2.2.20

openldapopenldapMatch2.2.21

openldapopenldapMatch2.2.22

openldapopenldapMatch2.2.23

openldapopenldapMatch2.2.24

openldapopenldapMatch2.2.25

openldapopenldapMatch2.2.26

openldapopenldapMatch2.2.27

openldapopenldapMatch2.2.28_r2

openldapopenldapMatch2.2.29_rev_1.134

openldapopenldapMatch2.3.27_2.20061018

openldapopenldapMatch2.3.28_2.20061022

openldapopenldapMatch2.3.28_20061022

openldapopenldapMatch2.3.28_e1.0.0

References

secunia.com/advisories/27424

secunia.com/advisories/27683

secunia.com/advisories/27756

secunia.com/advisories/27868

secunia.com/advisories/29225

secunia.com/advisories/29461

secunia.com/advisories/29682

security.gentoo.org/glsa/glsa-200803-28.xml

www.debian.org/security/2008/dsa-1541

www.mandriva.com/security/advisories?name=MDVSA-2008:058

www.novell.com/linux/security/advisories/2007_24_sr.html

www.openldap.org/its/index.cgi/Software%20Bugs?id=5163

www.openldap.org/lists/openldap-announce/200710/msg00001.html

www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html

www.securityfocus.com/bid/26245

www.ubuntu.com/usn/usn-551-1

www.vupen.com/english/advisories/2007/3645

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

JSON

Related for NVD:CVE-2007-5708

cve1 cvelist1 ubuntucve1 prion1 freebsd1 nessus10 ubuntu1 fedora2 openvas14 gentoo1 osv1 debian1