Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-1545
HistoryFeb 12, 2015 - 12:00 a.m.

CVE-2015-1545

2015-02-1200:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.961 High

EPSS

Percentile

99.5%

The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP
2.4.13 through 2.4.40 allows remote attackers to cause a denial of service
(NULL pointer dereference and crash) via an empty attribute list in a deref
control in a search request.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenldap< 2.4.28-1.1ubuntu4.5UNKNOWN
ubuntu14.04noarchopenldap< 2.4.31-1+nmu2ubuntu8.1UNKNOWN
ubuntu14.10noarchopenldap< 2.4.31-1+nmu2ubuntu11.1UNKNOWN
ubuntu15.04noarchopenldap< 2.4.31-1+nmu2ubuntu12.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.961 High

EPSS

Percentile

99.5%