2401 matches found
Null pointer dereference
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
Double free
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1546
CVE-2015-1546 affects OpenLDAP 2.4.40 (double free in get_vrFilter in servers/slapd/filter.c) allowing remote crash via crafted search. OpenSUSE/SUSE advisories (e.g., openldap2 updates) fixed this with package libldap-2_4-2.4.59-69.3; remediation: apply the security update (SUSE-SU-2015:0887-1 o...
CVE-2015-1545
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1545
OpenLDAP vulnerability CVE-2015-1545 affects slapd with the deref overlay: a NULL pointer dereference/crash can be triggered by an empty attribute list in a deref control within a search request. Affected range includes OpenLDAP 2.4.13–2.4.40. Exploitation would crash the daemon (denial of servic...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1545
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...
KLA10486 Denial of service vulnerability in OpenLDAP
Double free and other unknown vulnerability was found in OpenLDAP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a speciallyu designed search request. Original advisories - Related products OpenLDAP CVE list...
CVE-2015-1545
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...
UBUNTU-CVE-2015-1545
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...
Multiple Denial of Service Vulnerabilities in OpenLDAP slapd
OpenLDAP is an open source implementation of the LDAP directory service. Multiple denial-of-service vulnerabilities exist in OpenLDAP slapd, allowing attackers to exploit the vulnerabilities to crash affected applications and launch denial-of-service attacks...
FreeBSD : openldap -- two remote denial of service vulnerabilities (a0c45e53-ae51-11e4-8ac7-d050992ecde8)
Ryan Tandy reports : With the deref overlay enabled, ldapsearch with '-E deref=member:' causes slapd to crash. Bill MacAllister discovered that certain queries cause slapd to crash while freeing operation controls. This is a 2.4.40 regression. Earlier releases are not affected. %NASLMINLEVEL 7030...
openldap -- two remote denial of service vulnerabilities
Ryan Tandy reports: With the deref overlay enabled, ldapsearch with '-E deref=member:' causes slapd to crash. Bill MacAllister discovered that certain queries cause slapd to crash while freeing operation controls. This is a 2.4.40 regression. Earlier releases are not affected...
Login bypass when using user_ldap due to unauthenticated binds - ownCloud
"userldap" in the web-interface called "LDAP user and group backend" is an optional authentication backend for ownCloud for using LDAP users and groups within the ownCloud web application. The ownCloud team has discovered a vulnerability within the "userldap" application which, depending on the...
Server: Login bypass when using user_ldap due to unauthenticated binds
"userldap" in the web-interface called "LDAP user and group backend" is an optional authentication backend for ownCloud for using LDAP users and groups within the ownCloud web application. The ownCloud team has discovered a vulnerability within the "userldap" application which, depending on the...
RHEL 5 : rhev-hypervisor (RHSA-2011:0439)
An updated rhev-hypervisor package that fixes one security issue and one bug is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
OpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10 /usr/tmp/ Symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1232/info A vulnerability exists in OpenLDAP as shipped with some versions of Linux, including RedHat 6.1 and 6.2, and TurboLinux 6.0.2 and earlier. OpenLDAP will create files in /usr/tmp, which is actually a symbolic lin...
Apple Mac OS X 10.4.x OpenLDAP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18728/info Mac OS X Open Directory Server is prone to a denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker can exploit this issue to cause a crash in the LDAP server, effectivel...