Published: 29/06/2012 Updated: 07/01/2017

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 231

Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P

slapd in OpenLDAP prior to 2.4.30 allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap 2.4.24
openldap openldap 2.4.23
openldap openldap 2.4.15
openldap openldap 2.4.14
openldap openldap 2.4.7
openldap openldap 2.4.6
openldap openldap
openldap openldap 2.4.22
openldap openldap 2.4.21
openldap openldap 2.4.13
openldap openldap 2.4.12
openldap openldap 2.4.26
openldap openldap 2.4.25
openldap openldap 2.4.17
openldap openldap 2.4.16
openldap openldap 2.4.9
openldap openldap 2.4.8
openldap openldap 2.4.28
openldap openldap 2.4.27
openldap openldap 2.4.20
openldap openldap 2.4.19
openldap openldap 2.4.18
openldap openldap 2.4.11
openldap openldap 2.4.10

Synopsis Low: openldap security and bug fix update Type/Severity Security Advisory: Low Topic Updated openldap packages that fix one security issue and several bugs arenow available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having lowsecurity impact A Common ...

OpenLDAP could be made to crash if it received specially crafted network traffic ...

Debian Bug report logs - #776988 openldap: CVE-2015-1545: crashes on search with deref control and empty attr list Package: slapd; Maintainer for slapd is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Source for slapd is src:openldap (PTS, buildd, popcon) Reported by: Ryan Tandy <ryan@nardisca ...

Debian Bug report logs - #663644 [CVE-2012-1164] openldap (slapd): Assertion failure by processing search queries requesting only attributes for particular entry Package: openldap; Maintainer for openldap is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Reported by: Luciano Bello <luciano@debian ...

Debian Bug report logs - #761406 slapd: CVE-2014-9713: dangerous access rule in default config Package: slapd; Maintainer for slapd is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Source for slapd is src:openldap (PTS, buildd, popcon) Reported by: Dietrich Clauss <dietrich@clauss-itcom> ...

A denial of service flaw was found in the way the OpenLDAP server daemon (slapd) processed certain search queries requesting only attributes and no values In certain configurations, a remote attacker could issue a specially-crafted LDAP search query that, when processed by slapd, would cause slapd to crash due to an assertion failure (CVE-2012-11 ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-12-10-3 macOS Catalina 10152, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra <! ...

CWE-119 http://secunia.com/advisories/48372 http://secunia.com/advisories/49607 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143 http://rhn.redhat.com/errata/RHSA-2012-0899.html http://www.openldap.org/software/release/changes.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:130 http://www.securityfocus.com/bid/52404 http://security.gentoo.org/glsa/glsa-201406-36.xml https://support.apple.com/kb/HT210788 https://seclists.org/bugtraq/2019/Dec/23 http://seclists.org/fulldisclosure/2019/Dec/26 https://access.redhat.com/errata/RHSA-2012:0899 https://usn.ubuntu.com/2622-1/https://nvd.nist.gov

CVE-2012-1164

Vulnerability Summary

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect