Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1164
HistoryJun 29, 2012 - 12:00 a.m.

CVE-2012-1164

2012-06-2900:00:00
ubuntu.com
ubuntu.com
7

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.025 Low

EPSS

Percentile

90.1%

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial
of service (assertion failure and daemon exit) via an LDAP search query
with attrsOnly set to true, which causes empty attributes to be returned.

Bugs

Notes

Author Note
jdstrand Per Debian bug report, you have to be using slapo-translucent and slapo-rwm, so downgrading to β€˜low’
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenldap<Β 2.4.28-1.1ubuntu4.5UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.025 Low

EPSS

Percentile

90.1%