Published: 12/02/2015 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote malicious users to cause a denial of service (crash) via a crafted search query with a matched values control.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap 2.4.40
opensuse opensuse 13.1
opensuse opensuse 13.2
apple mac os x 10.10.2

Debian Bug report logs - #776988 openldap: CVE-2015-1545: crashes on search with deref control and empty attr list Package: slapd; Maintainer for slapd is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Source for slapd is src:openldap (PTS, buildd, popcon) Reported by: Ryan Tandy <ryan@nardisca ...

Debian Bug report logs - #776991 openldap: CVE-2015-1546: crash in valueReturnFilter cleanup Package: slapd; Maintainer for slapd is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Source for slapd is src:openldap (PTS, buildd, popcon) Reported by: Ryan Tandy <ryan@nardisca> Date: Tue, 3 F ...

Double free vulnerability in the get_vrFilter function in servers/slapd/filterc in OpenLDAP 2440 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control ...

NVD-CWE-Other http://secunia.com/advisories/62787 http://www.openwall.com/lists/oss-security/2015/02/07/3 http://www.openldap.org/its/?findid=8046 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776991 http://www.mandriva.com/security/advisories?name=MDVSA-2015:073 https://support.apple.com/HT204659 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html https://exchange.xforce.ibmcloud.com/vulnerabilities/100938 http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=2f1a2dd329b91afe561cd06b872d09630d4edb6a https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988 https://access.redhat.com/security/cve/cve-2015-1546

CVE-2015-1546

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect