Denial Of Service (DoS)

2019-01-1509:04:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.281 Low

EPSS

Percentile

96.9%

JSON

openldap is vulnerable to denial of service (DoS) attacks. The vulnerability exists as an off-by-one error leading to a crash was discovered in openldap’s processing of DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

CPENameOperatorVersion
openldapeq2.4.19__15.el6_0.2
openldapeq2.4.23__15.el6_1.1
openldapeq2.4.23__32.el6_4
openldapeq2.4.23__15.el6_1.3
openldapeq2.4.23__31.el6
openldapeq2.4.23__32.el6_4.1
openldapeq2.4.19__15.el6
openldapeq2.4.39__8.el6
openldapeq2.4.23__15.el6
openldapeq2.4.23__34.el6_5.1

Name	Operator	Version
openldap	eq	2.4.19__15.el6_0.2
openldap	eq	2.4.23__15.el6_1.1
openldap	eq	2.4.23__32.el6_4
openldap	eq	2.4.23__15.el6_1.3
openldap	eq	2.4.23__31.el6
openldap	eq	2.4.23__32.el6_4.1
openldap	eq	2.4.19__15.el6
openldap	eq	2.4.39__8.el6
openldap	eq	2.4.23__15.el6
openldap	eq	2.4.23__34.el6_5.1