High severity7.5NVD Advisory· Published Jan 2, 2020· Updated Jun 17, 2026

CVE-2014-8182

Description

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenLDAP/Openldap3 versions
cpe:2.3:a:openldap:openldap:2.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:openldap:openldap:2.4:*:*:*:*:*:*:*
- (no CPE)range: <2.4
- (no CPE)range: 2.4
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

security-tracker.debian.org/tracker/CVE-2014-8182nvdPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingPatchThird Party Advisory
bugzilla.suse.com/show_bug.cginvdExploitIssue TrackingPatchThird Party Advisory
access.redhat.com/security/cve/cve-2014-8182nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000