Buffer overflow in Openldap

CVE-2012-1164

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.

Vulnerability class: Buffer Overflow

EPSS: 0.037 (88.7th percentile) — read the EPSS interpretation.

Affected products

  • Openldap — versions 2.4.6, 2.4.7, 2.4.8
  • N/a — versions n/a

Weakness classification (CWE)

References