KLA10486 Denial of service vulnerability in OpenLDAP

Double free and other unknown vulnerability was found in OpenLDAP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a speciallyu designed search request.

Original advisories

Related products

OpenLDAP

CVE list

CVE-2015-1546 critical

CVE-2015-1545 critical

Solution

Update to latest version!

Get OpenLDAP

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• OpenLDAP versions from 2.4.13 to 2.4.40