Vulnerability in Openldap

CVE-2011-1081

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.

EPSS: 0.145 (96.3th percentile) — read the EPSS interpretation.

Affected products

  • Openldap — versions 2.4.6, 2.4.7, 2.4.8
  • N/a — versions n/a

Weakness classification (CWE)

References