CVEvulnerability
CVE-2014-8182
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-01-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-193
Description
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.
Affected configurations
• openldap openldap 2.4
• debian debian linux 8.0
• debian debian linux 9.0
• debian debian linux 10.0
Related
Weakness · CWE (1)
- CWE-193 Off-by-one Error weakness
References
- https://access.redhat.com/security/cve/cve-2014-8182 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2014-8182 Patch, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2014-8182 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2014-8182 Patch, Third Party Advisory