OpenLDAP 'servers/slapd/back-mdb/search.c' Denial of Service Vulnerability

OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States, which is included in Linux distributions. A denial-of-service vulnerability exists in OpenLDAP 'servers/slapd/back-mdb/search.c', which can be...

PT-2017-18822

Name of the Vulnerable Software and Affected Versions OpenLDAP versions 2.4.44 and earlier Description The issue allows a user with access to search the directory to crash slapd by issuing a search including the Paged Results control with a page size of 0. This is due to a double free vulnerabili...