CVEvulnerability

CVE-2015-6908

5.0 MEDIUM Published 2015-09-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-09-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

Affected configurations

• openldap openldap (<= 2.4.42) • apple mac os x (<= 10.11.1)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References