Browse CVEs

HIGH 7.5 CVE-2017-17740EPSS 7% contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buff… Openldap 6.5.1 / 21.1.2+ Fix from $1,9502017-12-18 MEDIUM 5.0 CVE-2015-6908EPSS 20% The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable as… Openldap after 10.11.1 Fix from $1,6002015-09-11 MEDIUM 5.0 CVE-2015-1546 Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of serv… Openldap Mitigation only Fix from $1,6002015-02-12 MEDIUM 5.0 CVE-2015-1545EPSS 11% The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service… Openldap No fix yet Fix from $1,6002015-02-12 MEDIUM 5.0 CVE-2011-1081EPSS 14% modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Na… Openldap Patch available Fix from $1,6002011-03-20 MEDIUM 6.8 CVE-2011-1025 bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attack… Openldap Patch available Fix from $1,6002011-03-20 MEDIUM 5.0 CVE-2010-0212EPSS 6% OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is no… Openldap Patch available Fix from $1,6002010-07-28 MEDIUM 5.0 CVE-2008-2952EPSS 13% liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams t… Openldap Mitigation only Fix from $1,6002008-07-01 HIGH 7.1 CVE-2007-5707 OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribut… Openldap Patch available Fix from $1,9502007-10-30 HIGH 7.1 CVE-2007-5708 slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant … Openldap Patch available Fix from $1,9502007-10-30 MEDIUM 5.1 CVE-2006-6493EPSS 9% Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enabl… Openldap after 2.4.3 Fix from $1,6002006-12-13 MEDIUM 5.0 CVE-2006-2754 Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname. Openldap Patch available Fix from $1,6002006-06-01 HIGH 7.2 CVE-2005-4442 Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a mal… Openldap after 2.2.28_r2 Fix from $1,9502005-12-21 MEDIUM 5.0 CVE-2004-1880 Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption). Openldap Patch available Fix from $1,6002004-12-31 HIGH 7.5 CVE-2004-0823 OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes… Openldap Patch available Fix from $1,9502004-09-07 MEDIUM 5.0 CVE-2003-1201 ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_… Openldap after 2.1.12 Fix from $1,6002003-03-20 HIGH 7.5 CVE-2002-1378EPSS 7% Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r paramete… Openldap after 2.2.0 Fix from $1,9502003-01-02 HIGH 7.5 CVE-2002-1379 OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applic… Openldap after 2.2.0 Fix from $1,9502003-01-02