Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-2952
HistoryJul 01, 2008 - 9:41 p.m.

CVE-2008-2952

2008-07-0121:41:00
CWE-399
mitre
web.nvd.nist.gov
38
openldap
liblber
io.c
denial of service
vulnerability
nvd
cve-2008-2952

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

9

Confidence

High

EPSS

0.823

Percentile

98.4%

JSON

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

Affected configurations

Nvd
Node
openldapopenldapMatch2.2.4
OR
openldapopenldapMatch2.2.5
OR
openldapopenldapMatch2.2.6
OR
openldapopenldapMatch2.2.7
OR
openldapopenldapMatch2.2.8
OR
openldapopenldapMatch2.2.9
OR
openldapopenldapMatch2.3.4
OR
openldapopenldapMatch2.3.5
OR
openldapopenldapMatch2.3.6
OR
openldapopenldapMatch2.3.7
OR
openldapopenldapMatch2.3.8
OR
openldapopenldapMatch2.3.9
OR
openldapopenldapMatch2.3.10
OR
openldapopenldapMatch2.3.11
OR
openldapopenldapMatch2.3.12
OR
openldapopenldapMatch2.3.13
OR
openldapopenldapMatch2.3.14
OR
openldapopenldapMatch2.3.15
OR
openldapopenldapMatch2.3.16
OR
openldapopenldapMatch2.3.17
OR
openldapopenldapMatch2.3.18
OR
openldapopenldapMatch2.3.19
OR
openldapopenldapMatch2.3.20
OR
openldapopenldapMatch2.3.21
OR
openldapopenldapMatch2.3.22
OR
openldapopenldapMatch2.3.23
OR
openldapopenldapMatch2.3.24
OR
openldapopenldapMatch2.3.25
OR
openldapopenldapMatch2.3.26
OR
openldapopenldapMatch2.3.27
OR
openldapopenldapMatch2.3.28
OR
openldapopenldapMatch2.3.29
OR
openldapopenldapMatch2.3.30
OR
openldapopenldapMatch2.3.31
OR
openldapopenldapMatch2.3.32
OR
openldapopenldapMatch2.3.33
OR
openldapopenldapMatch2.3.34
OR
openldapopenldapMatch2.3.35
OR
openldapopenldapMatch2.3.36
OR
openldapopenldapMatch2.3.37
OR
openldapopenldapMatch2.3.38
OR
openldapopenldapMatch2.3.39
OR
openldapopenldapMatch2.3.40
OR
openldapopenldapMatch2.3.41
OR
openldapopenldapMatch2.3.42
OR
openldapopenldapMatch2.3.43
OR
openldapopenldapMatch2.4.10
VendorProductVersionCPE
openldapopenldap2.2.4cpe:2.3:a:openldap:openldap:2.2.4:*:*:*:*:*:*:*
openldapopenldap2.2.5cpe:2.3:a:openldap:openldap:2.2.5:*:*:*:*:*:*:*
openldapopenldap2.2.6cpe:2.3:a:openldap:openldap:2.2.6:*:*:*:*:*:*:*
openldapopenldap2.2.7cpe:2.3:a:openldap:openldap:2.2.7:*:*:*:*:*:*:*
openldapopenldap2.2.8cpe:2.3:a:openldap:openldap:2.2.8:*:*:*:*:*:*:*
openldapopenldap2.2.9cpe:2.3:a:openldap:openldap:2.2.9:*:*:*:*:*:*:*
openldapopenldap2.3.4cpe:2.3:a:openldap:openldap:2.3.4:*:*:*:*:*:*:*
openldapopenldap2.3.5cpe:2.3:a:openldap:openldap:2.3.5:*:*:*:*:*:*:*
openldapopenldap2.3.6cpe:2.3:a:openldap:openldap:2.3.6:*:*:*:*:*:*:*
openldapopenldap2.3.7cpe:2.3:a:openldap:openldap:2.3.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 471

References

Related

openvas 25
altlinux 1
securityvulns 2
nessus 15
zdi 1
nvd 1
prion 1
debian 1
centos 1
exploitdb 1
debiancve 1
checkpoint_advisories 2
fedora 2
osv 1
redhat 1
gentoo 1
ubuntu 1
ubuntucve 1
oraclelinux 1
cvelist 1
openvas
openvas
Debian: Security Advisory (DSA-1650-1)
2008-11-01 00:00:00
Ubuntu: Security Advisory (USN-634-1)
2009-03-23 00:00:00
CentOS Update for compat-openldap CESA-2008:0583 centos4 i386
2009-02-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package openldap2.4 version 2.3.41-alt2
2008-07-02 00:00:00
securityvulns
securityvulns
[USN-634-1] OpenLDAP vulnerability
2008-08-03 00:00:00
OpenLDAP slapd DoS
2008-08-03 00:00:00
nessus
nessus
openSUSE Security Update : openldap2 (openldap2-145)
2009-07-21 00:00:00
Mandriva Linux Security Advisory : openldap (MDVSA-2008:144)
2009-04-23 00:00:00
openSUSE 10 Security Update : openldap2 (openldap2-5509)
2008-10-17 00:00:00
zdi
zdi
OpenLDAP BER Decoding Remote DoS Vulnerability
2008-08-14 00:00:00
nvd
nvd
CVE-2008-2952
2008-07-01 21:41:00
prion
prion
Code injection
2008-07-01 21:41:00
debian
debian
[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service
2008-10-12 09:35:44
centos
centos
compat, openldap security update
2008-07-09 16:17:29
exploitdb
exploitdb
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
2008-06-30 00:00:00
debiancve
debiancve
CVE-2008-2952
2008-07-01 21:41:00
checkpoint_advisories
checkpoint_advisories
OpenLDAP ber_get_next BER Decoding Denial of Service
2008-10-10 00:00:00
OpenLDAP BER Decoding Denial of Service (CVE-2008-2952)
2010-03-24 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: openldap-2.4.8-6.fc9
2008-07-03 03:17:22
[SECURITY] Fedora 8 Update: openldap-2.3.39-4.fc8
2008-07-03 03:15:35
osv
osv
openldap2.3 - denial of service
2008-10-12 00:00:00
redhat
redhat
(RHSA-2008:0583) Important: openldap security update
2008-07-09 00:00:00
gentoo
gentoo
OpenLDAP: Denial of Service vulnerability
2008-08-08 00:00:00
ubuntu
ubuntu
OpenLDAP vulnerability
2008-08-01 00:00:00
ubuntucve
ubuntucve
CVE-2008-2952
2008-07-01 00:00:00
oraclelinux
oraclelinux
openldap security update
2008-07-09 00:00:00
cvelist
cvelist
CVE-2008-2952
2008-07-01 21:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

9

Confidence

High

EPSS

0.823

Percentile

98.4%

JSON
Related for CVE-2008-2952
openvas25altlinux1securityvulns2nessus15zdi1nvd1prion1debian1centos1exploitdb1debiancve1checkpoint_advisories2fedora2osv1redhat1gentoo1ubuntu1ubuntucve1oraclelinux1cvelist1