Double free

2017-05-2916:29:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.915 High

EPSS

Percentile

98.9%

JSON

servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.

CPENameOperatorVersion
debian_linuxeq8.0
policy_auditorlt6.5.1
openldaple2.4.44
blockchain_platformlt21.1.2
enterprise_linux_desktopeq7.0
enterprise_linux_euseq7.4
enterprise_linux_euseq7.5
enterprise_linux_euseq7.6
enterprise_linux_euseq7.7
enterprise_linux_servereq7.0

Name	Operator	Version
debian_linux	eq	8.0
policy_auditor	lt	6.5.1
openldap	le	2.4.44
blockchain_platform	lt	21.1.2
enterprise_linux_desktop	eq	7.0
enterprise_linux_eus	eq	7.4
enterprise_linux_eus	eq	7.5
enterprise_linux_eus	eq	7.6
enterprise_linux_eus	eq	7.7
enterprise_linux_server	eq	7.0