Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openldap openldap 2.4.40 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2015-1546
Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote malicious users to cause a denial of service (crash) via a crafted search query with a matched values control.
Openldap Openldap 2.4.40Opensuse Opensuse 13.1Opensuse Opensuse 13.2Apple Mac Os X 10.10.2
445
VMScore
CVE-2015-1545
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 up to and including 2.4.40 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Openldap Openldap 2.4.39Openldap Openldap 2.4.17Openldap Openldap 2.4.37Openldap Openldap 2.4.26Openldap Openldap 2.4.31Openldap Openldap 2.4.40Openldap Openldap 2.4.16Openldap Openldap 2.4.29Openldap Openldap 2.4.32Openldap Openldap 2.4.22Openldap Openldap 2.4.25Openldap Openldap 2.4.20Openldap Openldap 2.4.15Openldap Openldap 2.4.18Openldap Openldap 2.4.27Openldap Openldap 2.4.36Openldap Openldap 2.4.38Openldap Openldap 2.4.28Openldap Openldap 2.4.23Openldap Openldap 2.4.24Openldap Openldap 2.4.34Openldap Openldap 2.4.14
356
VMScore
CVE-2014-9713
The default slapd configuration in the Debian openldap package 2.4.23-3 up to and including 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.
Openldap Openldap 2.4.23Openldap Openldap 2.4.30Openldap Openldap 2.4.24Openldap Openldap 2.4.25Openldap Openldap 2.4.32Openldap Openldap 2.4.33Openldap Openldap 2.4.26Openldap Openldap 2.4.27Openldap Openldap 2.4.34Openldap Openldap 2.4.35Openldap Openldap 2.4.31Openldap Openldap 2.4.39Openldap Openldap 2.4.28Openldap Openldap 2.4.29Openldap Openldap 2.4.36Openldap Openldap 2.4.37Openldap Openldap 2.4.38Debian Debian Linux 7.0
505
VMScore
CVE-2015-6908
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and previous versions allows remote malicious users to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.
Openldap OpenldapApple Mac Os X
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook