Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0211
HistoryJul 28, 2010 - 12:48 p.m.

CVE-2010-0211

2010-07-2812:48:51
CWE-252
[email protected]
web.nvd.nist.gov
48
openldap
2.4.22
slap_modrdn2mods
remote code execution
cve-2010-0211
nvd
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.789 High

EPSS

Percentile

98.3%

JSON

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.

Affected configurations

NVD
Node
openldapopenldapMatch2.4.22
Node
vmwareesxiMatch4.0
OR
vmwareesxiMatch4.1
Node
opensuseopensuseMatch11.0
Node
applemac_os_xRange10.6.0–10.6.5
OR
applemac_os_x_serverRange10.6.0–10.6.5
CPENameOperatorVersion
openldap:openldapopenldapeq2.4.22

References

Related

prion 1
nvd 1
veracode 1
ubuntucve 1
checkpoint_advisories 1
debiancve 1
cvelist 1
nessus 25
openvas 21
centos 2
securityvulns 4
oraclelinux 2
altlinux 2
osv 1
debian 1
fedora 2
redhat 3
ubuntu 1
vmware 2
gentoo 1
prion
prion
Double free
2010-07-28 12:48:00
nvd
nvd
CVE-2010-0211
2010-07-28 12:48:51
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:44:09
ubuntucve
ubuntucve
CVE-2010-0211
2010-07-28 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenLDAP Modrdn RDN UTF-8 String Code Execution (CVE-2010-0211)
2010-10-13 00:00:00
debiancve
debiancve
CVE-2010-0211
2010-07-28 12:48:51
cvelist
cvelist
CVE-2010-0211
2010-07-27 22:00:00
nessus
nessus
Fedora 13 : openldap-2.4.21-10.fc13 (2010-11343)
2010-08-24 00:00:00
RHEL 4 : openldap (RHSA-2010:0543)
2010-07-28 00:00:00
SuSE 11.1 Security Update : openLDAP (SAT Patch Number 2551)
2011-01-21 00:00:00
openvas
openvas
Fedora Update for openldap FEDORA-2010-11319
2010-11-16 00:00:00
RedHat Update for openldap RHSA-2010:0542-01
2010-07-23 00:00:00
Fedora Update for openldap FEDORA-2010-11343
2010-08-30 00:00:00
centos
centos
compat, openldap security update
2010-07-21 22:18:04
compat, openldap security update
2010-07-21 19:15:25
securityvulns
securityvulns
OpenLDAP multiple security vulnerabilities
2010-07-30 00:00:00
[ MDVSA-2010:142 ] openldap
2010-07-30 00:00:00
Apple Mac OS X and QuickTime multiple security vulnerabilities
2013-11-18 00:00:00
oraclelinux
oraclelinux
openldap security update
2010-07-20 00:00:00
openldap security update
2010-07-20 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt0.M50P.1
2010-07-01 00:00:00
Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt1
2010-06-30 00:00:00
osv
osv
openldap - potential code execution
2010-07-29 00:00:00
debian
debian
[SECURITY] [DSA 2077-1] New openldap packages fix potential code execution
2010-07-29 19:08:28
fedora
fedora
[SECURITY] Fedora 13 Update: openldap-2.4.21-10.fc13
2010-08-23 22:04:44
[SECURITY] Fedora 12 Update: openldap-2.4.19-6.fc12
2010-10-31 21:33:48
redhat
redhat
(RHSA-2010:0543) Moderate: openldap security update
2010-07-20 00:00:00
(RHSA-2010:0542) Moderate: openldap security update
2010-07-20 00:00:00
(RHSA-2010:0622) Important: rhev-hypervisor security and bug fix update
2010-08-19 00:00:00
ubuntu
ubuntu
OpenLDAP vulnerabilities
2010-08-09 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console packages glibc, sudo, and openldap
2011-01-04 00:00:00
VMware ESX third party updates for Service Console packages glibc, sudo, and openldap
2011-01-04 00:00:00
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.789 High

EPSS

Percentile

98.3%

JSON
Related for CVE-2010-0211
prion1nvd1veracode1ubuntucve1checkpoint_advisories1debiancve1cvelist1nessus25openvas21centos2securityvulns4oraclelinux2altlinux2osv1debian1fedora2redhat3ubuntu1vmware2gentoo1