CVEvulnerability

CVE-2012-1164

2.6 LOW Published 2012-06-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.

Affected configurations

• openldap openldap (<= 2.4.29) • openldap openldap 2.4.6 • openldap openldap 2.4.7 • openldap openldap 2.4.8 • openldap openldap 2.4.9 • openldap openldap 2.4.10 • openldap openldap 2.4.11 • openldap openldap 2.4.12 • openldap openldap 2.4.13 • openldap openldap 2.4.14 • openldap openldap 2.4.15 • openldap openldap 2.4.16 • openldap openldap 2.4.17 • openldap openldap 2.4.18 • openldap openldap 2.4.19 • openldap openldap 2.4.20 • openldap openldap 2.4.21 • openldap openldap 2.4.22 • openldap openldap 2.4.23 • openldap openldap 2.4.24 • openldap openldap 2.4.25 • openldap openldap 2.4.26 • openldap openldap 2.4.27 • openldap openldap 2.4.28

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References