Unrated severityNVD Advisory· Published Jul 28, 2010· Updated Apr 29, 2026
CVE-2010-0212
CVE-2010-0212
Description
OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
18- www.vupen.com/english/advisories/2010/1849nvdPatchVendor Advisory
- www.openldap.org/its/index.cgi/Software%20BugsnvdExploit
- www.securityfocus.com/bid/41770nvdExploitPatch
- secunia.com/advisories/40639nvdVendor Advisory
- secunia.com/advisories/40687nvdVendor Advisory
- www.vupen.com/english/advisories/2010/1858nvdVendor Advisory
- kb.juniper.net/InfoCenter/indexnvd
- kb.juniper.net/InfoCenter/indexnvd
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlnvd
- secunia.com/advisories/42787nvd
- security.gentoo.org/glsa/glsa-201406-36.xmlnvd
- support.apple.com/kb/HT4435nvd
- www.redhat.com/support/errata/RHSA-2010-0542.htmlnvd
- www.securityfocus.com/archive/1/515545/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.vmware.com/security/advisories/VMSA-2011-0001.htmlnvd
- www.vupen.com/english/advisories/2011/0025nvd
News mentions
0No linked articles in our index yet.