CVEvulnerability

CVE-2008-2952

5.0 MEDIUM Published 2008-07-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-07-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

Affected configurations

• openldap openldap 2.2.4 • openldap openldap 2.2.5 • openldap openldap 2.2.6 • openldap openldap 2.2.7 • openldap openldap 2.2.8 • openldap openldap 2.2.9 • openldap openldap 2.3.4 • openldap openldap 2.3.5 • openldap openldap 2.3.6 • openldap openldap 2.3.7 • openldap openldap 2.3.8 • openldap openldap 2.3.9 • openldap openldap 2.3.10 • openldap openldap 2.3.11 • openldap openldap 2.3.12 • openldap openldap 2.3.13 • openldap openldap 2.3.14 • openldap openldap 2.3.15 • openldap openldap 2.3.16 • openldap openldap 2.3.17 • openldap openldap 2.3.18 • openldap openldap 2.3.19 • openldap openldap 2.3.20 • openldap openldap 2.3.21 • openldap openldap 2.3.22 • openldap openldap 2.3.23 • openldap openldap 2.3.24 • openldap openldap 2.3.25 • openldap openldap 2.3.26 • openldap openldap 2.3.27 • openldap openldap 2.3.28 • openldap openldap 2.3.29 • openldap openldap 2.3.30 • openldap openldap 2.3.31 • openldap openldap 2.3.32 • openldap openldap 2.3.33 • openldap openldap 2.3.34 • openldap openldap 2.3.35 • openldap openldap 2.3.36 • openldap openldap 2.3.37 • openldap openldap 2.3.38 • openldap openldap 2.3.39 • openldap openldap 2.3.40 • openldap openldap 2.3.41 • openldap openldap 2.3.42 • openldap openldap 2.3.43 • openldap openldap 2.4.10

Related

Weakness · not in database (1)

References