rpm package
suse/openldap2-client&distro=SUSE Linux Enterprise Server 12-LTSS
pkg:rpm/suse/openldap2-client&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-17740 | Hig | 7.5 | < 2.4.41-18.24.9.1 | 2.4.41-18.24.9.1 | Dec 18, 2017 | contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN ope | |
| CVE-2017-9287 | Med | 6.5 | < 2.4.41-18.24.9.1 | 2.4.41-18.24.9.1 | May 29, 2017 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0. |
- affected < 2.4.41-18.24.9.1fixed 2.4.41-18.24.9.1
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN ope
- affected < 2.4.41-18.24.9.1fixed 2.4.41-18.24.9.1
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.