Lucene search
HistoryOct 27, 2011 - 8:55 p.m.
CVE-2011-4079
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
9.1
Confidence
High
EPSS
0.044
Percentile
92.4%
Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.
Affected configurations
Node
openldapopenldapRange≤2.4.26
ORopenldapopenldapMatch1.0
ORopenldapopenldapMatch1.0.1
ORopenldapopenldapMatch1.0.2
ORopenldapopenldapMatch1.0.3
ORopenldapopenldapMatch1.1
ORopenldapopenldapMatch1.1.0
ORopenldapopenldapMatch1.1.1
ORopenldapopenldapMatch1.1.2
ORopenldapopenldapMatch1.1.3
ORopenldapopenldapMatch1.1.4
ORopenldapopenldapMatch1.2
ORopenldapopenldapMatch1.2.0
ORopenldapopenldapMatch1.2.1
ORopenldapopenldapMatch1.2.2
ORopenldapopenldapMatch1.2.3
ORopenldapopenldapMatch1.2.4
ORopenldapopenldapMatch1.2.5
ORopenldapopenldapMatch1.2.6
ORopenldapopenldapMatch1.2.7
ORopenldapopenldapMatch1.2.8
ORopenldapopenldapMatch1.2.9
ORopenldapopenldapMatch1.2.10
ORopenldapopenldapMatch1.2.11
ORopenldapopenldapMatch1.2.12
ORopenldapopenldapMatch1.2.13
ORopenldapopenldapMatch2.0
ORopenldapopenldapMatch2.0.0
ORopenldapopenldapMatch2.0.1
ORopenldapopenldapMatch2.0.2
ORopenldapopenldapMatch2.0.3
ORopenldapopenldapMatch2.0.4
ORopenldapopenldapMatch2.0.5
ORopenldapopenldapMatch2.0.6
ORopenldapopenldapMatch2.0.7
ORopenldapopenldapMatch2.0.8
ORopenldapopenldapMatch2.0.9
ORopenldapopenldapMatch2.0.10
ORopenldapopenldapMatch2.0.11
ORopenldapopenldapMatch2.0.11_9
ORopenldapopenldapMatch2.0.11_11
ORopenldapopenldapMatch2.0.11_11s
ORopenldapopenldapMatch2.0.12
ORopenldapopenldapMatch2.0.13
ORopenldapopenldapMatch2.0.14
ORopenldapopenldapMatch2.0.15
ORopenldapopenldapMatch2.0.16
ORopenldapopenldapMatch2.0.17
ORopenldapopenldapMatch2.0.18
ORopenldapopenldapMatch2.0.19
ORopenldapopenldapMatch2.0.20
ORopenldapopenldapMatch2.0.21
ORopenldapopenldapMatch2.0.22
ORopenldapopenldapMatch2.0.23
ORopenldapopenldapMatch2.0.24
ORopenldapopenldapMatch2.0.25
ORopenldapopenldapMatch2.0.26
ORopenldapopenldapMatch2.0.27
ORopenldapopenldapMatch2.1.2
ORopenldapopenldapMatch2.1.3
ORopenldapopenldapMatch2.1.4
ORopenldapopenldapMatch2.1.5
ORopenldapopenldapMatch2.1.6
ORopenldapopenldapMatch2.1.7
ORopenldapopenldapMatch2.1.8
ORopenldapopenldapMatch2.1.9
ORopenldapopenldapMatch2.1.10
ORopenldapopenldapMatch2.1.11
ORopenldapopenldapMatch2.1.12
ORopenldapopenldapMatch2.1.13
ORopenldapopenldapMatch2.1.14
ORopenldapopenldapMatch2.1.15
ORopenldapopenldapMatch2.1.16
ORopenldapopenldapMatch2.1.17
ORopenldapopenldapMatch2.1.18
ORopenldapopenldapMatch2.1.19
ORopenldapopenldapMatch2.1.20
ORopenldapopenldapMatch2.1.21
ORopenldapopenldapMatch2.1.22
ORopenldapopenldapMatch2.1.23
ORopenldapopenldapMatch2.1.24
ORopenldapopenldapMatch2.1.25
ORopenldapopenldapMatch2.1.26
ORopenldapopenldapMatch2.1.27
ORopenldapopenldapMatch2.1.28
ORopenldapopenldapMatch2.1.29
ORopenldapopenldapMatch2.1.30
ORopenldapopenldapMatch2.1_.20
ORopenldapopenldapMatch2.2.0
ORopenldapopenldapMatch2.2.1
ORopenldapopenldapMatch2.2.4
ORopenldapopenldapMatch2.2.5
ORopenldapopenldapMatch2.2.6
ORopenldapopenldapMatch2.2.7
ORopenldapopenldapMatch2.2.8
ORopenldapopenldapMatch2.2.9
ORopenldapopenldapMatch2.2.10
ORopenldapopenldapMatch2.2.11
ORopenldapopenldapMatch2.2.12
ORopenldapopenldapMatch2.2.13
ORopenldapopenldapMatch2.2.14
ORopenldapopenldapMatch2.2.15
ORopenldapopenldapMatch2.2.16
ORopenldapopenldapMatch2.2.17
ORopenldapopenldapMatch2.2.18
ORopenldapopenldapMatch2.2.19
ORopenldapopenldapMatch2.2.20
ORopenldapopenldapMatch2.2.21
ORopenldapopenldapMatch2.2.22
ORopenldapopenldapMatch2.2.23
ORopenldapopenldapMatch2.2.24
ORopenldapopenldapMatch2.2.25
ORopenldapopenldapMatch2.2.26
ORopenldapopenldapMatch2.2.27
ORopenldapopenldapMatch2.3.4
ORopenldapopenldapMatch2.3.5
ORopenldapopenldapMatch2.3.6
ORopenldapopenldapMatch2.3.7
ORopenldapopenldapMatch2.3.8
ORopenldapopenldapMatch2.3.9
ORopenldapopenldapMatch2.3.10
ORopenldapopenldapMatch2.3.11
ORopenldapopenldapMatch2.3.12
ORopenldapopenldapMatch2.3.13
ORopenldapopenldapMatch2.3.14
ORopenldapopenldapMatch2.3.15
ORopenldapopenldapMatch2.3.16
ORopenldapopenldapMatch2.3.17
ORopenldapopenldapMatch2.3.18
ORopenldapopenldapMatch2.3.19
ORopenldapopenldapMatch2.3.20
ORopenldapopenldapMatch2.3.21
ORopenldapopenldapMatch2.3.22
ORopenldapopenldapMatch2.3.23
ORopenldapopenldapMatch2.3.24
ORopenldapopenldapMatch2.3.25
ORopenldapopenldapMatch2.3.26
ORopenldapopenldapMatch2.3.27
ORopenldapopenldapMatch2.3.28
ORopenldapopenldapMatch2.3.29
ORopenldapopenldapMatch2.3.30
ORopenldapopenldapMatch2.3.31
ORopenldapopenldapMatch2.3.32
ORopenldapopenldapMatch2.3.33
ORopenldapopenldapMatch2.3.34
ORopenldapopenldapMatch2.3.35
ORopenldapopenldapMatch2.3.36
ORopenldapopenldapMatch2.3.37
ORopenldapopenldapMatch2.3.38
ORopenldapopenldapMatch2.3.39
ORopenldapopenldapMatch2.3.40
ORopenldapopenldapMatch2.3.41
ORopenldapopenldapMatch2.3.42
ORopenldapopenldapMatch2.3.43
ORopenldapopenldapMatch2.4.3
ORopenldapopenldapMatch2.4.6
ORopenldapopenldapMatch2.4.7
ORopenldapopenldapMatch2.4.8
ORopenldapopenldapMatch2.4.9
ORopenldapopenldapMatch2.4.10
ORopenldapopenldapMatch2.4.11
ORopenldapopenldapMatch2.4.12
ORopenldapopenldapMatch2.4.13
ORopenldapopenldapMatch2.4.14
ORopenldapopenldapMatch2.4.15
ORopenldapopenldapMatch2.4.16
ORopenldapopenldapMatch2.4.17
ORopenldapopenldapMatch2.4.18
ORopenldapopenldapMatch2.4.19
ORopenldapopenldapMatch2.4.20
ORopenldapopenldapMatch2.4.21
ORopenldapopenldapMatch2.4.22
ORopenldapopenldapMatch2.4.23
ORopenldapopenldapMatch2.4.24
ORopenldapopenldapMatch2.4.25
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openldap | openldap | * | cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* |
| openldap | openldap | 1.0 | cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:* |
| openldap | openldap | 1.0.1 | cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:* |
| openldap | openldap | 1.0.2 | cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:* |
| openldap | openldap | 1.0.3 | cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:* |
| openldap | openldap | 1.1 | cpe:2.3:a:openldap:openldap:1.1:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.0 | cpe:2.3:a:openldap:openldap:1.1.0:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.1 | cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.2 | cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.3 | cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:* |
References
secunia.com/advisories/46599
security.gentoo.org/glsa/glsa-201406-36.xml
www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=507238713b71208ec4f262f312cb495a302df9e9
www.openldap.org/its/index.cgi/Software%20Bugs?id=7059%3Bselectid=7059
www.openwall.com/lists/oss-security/2011/10/26/5
www.openwall.com/lists/oss-security/2011/10/26/9
www.securityfocus.com/bid/50384
www.ubuntu.com/usn/USN-1266-1
bugzilla.redhat.com/show_bug.cgi?id=749324
exchange.xforce.ibmcloud.com/vulnerabilities/70991
Related
openvas
openvas
Ubuntu Update for openldap USN-1266-1
2011-11-18 00:00:00
OpenLDAP < 2.4.27 DoS Vulnerability
2021-11-02 00:00:00
Ubuntu: Security Advisory (USN-1266-1)
2011-11-18 00:00:00
prion
prion
Heap overflow
2011-10-27 20:55:00
debiancve
debiancve
CVE-2011-4079
2011-10-27 20:55:01
ubuntu
ubuntu
OpenLDAP vulnerability
2011-11-17 00:00:00
cvelist
cvelist
CVE-2011-4079
2011-10-27 20:00:00
ubuntucve
ubuntucve
CVE-2011-4079
2011-10-27 00:00:00
securityvulns
securityvulns
OpenLDAP buffer overflow
2011-11-20 00:00:00
[USN-1266-1] OpenLDAP vulnerability
2011-11-20 00:00:00
nessus
nessus
GLSA-201406-36 : OpenLDAP: Multiple vulnerabilities
2014-07-01 00:00:00
cve
cve
CVE-2011-4079
2011-10-27 20:55:01
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
9.1
Confidence
High
EPSS
0.044
Percentile
92.4%
Related for NVD:CVE-2011-4079