4

CVE-2011-4079

Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openldap ≫ Openldap Version <= 2.4.26
Openldap ≫ Openldap Version1.0
Openldap ≫ Openldap Version1.0.1
Openldap ≫ Openldap Version1.0.2
Openldap ≫ Openldap Version1.0.3
Openldap ≫ Openldap Version1.1
Openldap ≫ Openldap Version1.1.0
Openldap ≫ Openldap Version1.1.1
Openldap ≫ Openldap Version1.1.2
Openldap ≫ Openldap Version1.1.3
Openldap ≫ Openldap Version1.1.4
Openldap ≫ Openldap Version1.2
Openldap ≫ Openldap Version1.2.0
Openldap ≫ Openldap Version1.2.1
Openldap ≫ Openldap Version1.2.2
Openldap ≫ Openldap Version1.2.3
Openldap ≫ Openldap Version1.2.4
Openldap ≫ Openldap Version1.2.5
Openldap ≫ Openldap Version1.2.6
Openldap ≫ Openldap Version1.2.7
Openldap ≫ Openldap Version1.2.8
Openldap ≫ Openldap Version1.2.9
Openldap ≫ Openldap Version1.2.10
Openldap ≫ Openldap Version1.2.11
Openldap ≫ Openldap Version1.2.12
Openldap ≫ Openldap Version1.2.13
Openldap ≫ Openldap Version2.0
Openldap ≫ Openldap Version2.0.0
Openldap ≫ Openldap Version2.0.1
Openldap ≫ Openldap Version2.0.2
Openldap ≫ Openldap Version2.0.3
Openldap ≫ Openldap Version2.0.4
Openldap ≫ Openldap Version2.0.5
Openldap ≫ Openldap Version2.0.6
Openldap ≫ Openldap Version2.0.7
Openldap ≫ Openldap Version2.0.8
Openldap ≫ Openldap Version2.0.9
Openldap ≫ Openldap Version2.0.10
Openldap ≫ Openldap Version2.0.11
Openldap ≫ Openldap Version2.0.11_9
Openldap ≫ Openldap Version2.0.11_11
Openldap ≫ Openldap Version2.0.11_11s
Openldap ≫ Openldap Version2.0.12
Openldap ≫ Openldap Version2.0.13
Openldap ≫ Openldap Version2.0.14
Openldap ≫ Openldap Version2.0.15
Openldap ≫ Openldap Version2.0.16
Openldap ≫ Openldap Version2.0.17
Openldap ≫ Openldap Version2.0.18
Openldap ≫ Openldap Version2.0.19
Openldap ≫ Openldap Version2.0.20
Openldap ≫ Openldap Version2.0.21
Openldap ≫ Openldap Version2.0.22
Openldap ≫ Openldap Version2.0.23
Openldap ≫ Openldap Version2.0.24
Openldap ≫ Openldap Version2.0.25
Openldap ≫ Openldap Version2.0.26
Openldap ≫ Openldap Version2.0.27
Openldap ≫ Openldap Version2.1.2
Openldap ≫ Openldap Version2.1.3
Openldap ≫ Openldap Version2.1.4
Openldap ≫ Openldap Version2.1.5
Openldap ≫ Openldap Version2.1.6
Openldap ≫ Openldap Version2.1.7
Openldap ≫ Openldap Version2.1.8
Openldap ≫ Openldap Version2.1.9
Openldap ≫ Openldap Version2.1.10
Openldap ≫ Openldap Version2.1.11
Openldap ≫ Openldap Version2.1.12
Openldap ≫ Openldap Version2.1.13
Openldap ≫ Openldap Version2.1.14
Openldap ≫ Openldap Version2.1.15
Openldap ≫ Openldap Version2.1.16
Openldap ≫ Openldap Version2.1.17
Openldap ≫ Openldap Version2.1.18
Openldap ≫ Openldap Version2.1.19
Openldap ≫ Openldap Version2.1.20
Openldap ≫ Openldap Version2.1.21
Openldap ≫ Openldap Version2.1.22
Openldap ≫ Openldap Version2.1.23
Openldap ≫ Openldap Version2.1.24
Openldap ≫ Openldap Version2.1.25
Openldap ≫ Openldap Version2.1.26
Openldap ≫ Openldap Version2.1.27
Openldap ≫ Openldap Version2.1.28
Openldap ≫ Openldap Version2.1.29
Openldap ≫ Openldap Version2.1.30
Openldap ≫ Openldap Version2.1_.20
Openldap ≫ Openldap Version2.2.0
Openldap ≫ Openldap Version2.2.1
Openldap ≫ Openldap Version2.2.4
Openldap ≫ Openldap Version2.2.5
Openldap ≫ Openldap Version2.2.6
Openldap ≫ Openldap Version2.2.7
Openldap ≫ Openldap Version2.2.8
Openldap ≫ Openldap Version2.2.9
Openldap ≫ Openldap Version2.2.10
Openldap ≫ Openldap Version2.2.11
Openldap ≫ Openldap Version2.2.12
Openldap ≫ Openldap Version2.2.13
Openldap ≫ Openldap Version2.2.14
Openldap ≫ Openldap Version2.2.15
Openldap ≫ Openldap Version2.2.16
Openldap ≫ Openldap Version2.2.17
Openldap ≫ Openldap Version2.2.18
Openldap ≫ Openldap Version2.2.19
Openldap ≫ Openldap Version2.2.20
Openldap ≫ Openldap Version2.2.21
Openldap ≫ Openldap Version2.2.22
Openldap ≫ Openldap Version2.2.23
Openldap ≫ Openldap Version2.2.24
Openldap ≫ Openldap Version2.2.25
Openldap ≫ Openldap Version2.2.26
Openldap ≫ Openldap Version2.2.27
Openldap ≫ Openldap Version2.3.4
Openldap ≫ Openldap Version2.3.5
Openldap ≫ Openldap Version2.3.6
Openldap ≫ Openldap Version2.3.7
Openldap ≫ Openldap Version2.3.8
Openldap ≫ Openldap Version2.3.9
Openldap ≫ Openldap Version2.3.10
Openldap ≫ Openldap Version2.3.11
Openldap ≫ Openldap Version2.3.12
Openldap ≫ Openldap Version2.3.13
Openldap ≫ Openldap Version2.3.14
Openldap ≫ Openldap Version2.3.15
Openldap ≫ Openldap Version2.3.16
Openldap ≫ Openldap Version2.3.17
Openldap ≫ Openldap Version2.3.18
Openldap ≫ Openldap Version2.3.19
Openldap ≫ Openldap Version2.3.20
Openldap ≫ Openldap Version2.3.21
Openldap ≫ Openldap Version2.3.22
Openldap ≫ Openldap Version2.3.23
Openldap ≫ Openldap Version2.3.24
Openldap ≫ Openldap Version2.3.25
Openldap ≫ Openldap Version2.3.26
Openldap ≫ Openldap Version2.3.27
Openldap ≫ Openldap Version2.3.28
Openldap ≫ Openldap Version2.3.29
Openldap ≫ Openldap Version2.3.30
Openldap ≫ Openldap Version2.3.31
Openldap ≫ Openldap Version2.3.32
Openldap ≫ Openldap Version2.3.33
Openldap ≫ Openldap Version2.3.34
Openldap ≫ Openldap Version2.3.35
Openldap ≫ Openldap Version2.3.36
Openldap ≫ Openldap Version2.3.37
Openldap ≫ Openldap Version2.3.38
Openldap ≫ Openldap Version2.3.39
Openldap ≫ Openldap Version2.3.40
Openldap ≫ Openldap Version2.3.41
Openldap ≫ Openldap Version2.3.42
Openldap ≫ Openldap Version2.3.43
Openldap ≫ Openldap Version2.4.3
Openldap ≫ Openldap Version2.4.6
Openldap ≫ Openldap Version2.4.7
Openldap ≫ Openldap Version2.4.8
Openldap ≫ Openldap Version2.4.9
Openldap ≫ Openldap Version2.4.10
Openldap ≫ Openldap Version2.4.11
Openldap ≫ Openldap Version2.4.12
Openldap ≫ Openldap Version2.4.13
Openldap ≫ Openldap Version2.4.14
Openldap ≫ Openldap Version2.4.15
Openldap ≫ Openldap Version2.4.16
Openldap ≫ Openldap Version2.4.17
Openldap ≫ Openldap Version2.4.18
Openldap ≫ Openldap Version2.4.19
Openldap ≫ Openldap Version2.4.20
Openldap ≫ Openldap Version2.4.21
Openldap ≫ Openldap Version2.4.22
Openldap ≫ Openldap Version2.4.23
Openldap ≫ Openldap Version2.4.24
Openldap ≫ Openldap Version2.4.25
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.71% 0.883
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-201406-36.xml
http://secunia.com/advisories/46599
Vendor Advisory
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=507238713b71208ec4f262f312cb495a302df9e9
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7059%3Bselectid=7059
http://www.openwall.com/lists/oss-security/2011/10/26/5
http://www.openwall.com/lists/oss-security/2011/10/26/9
http://www.securityfocus.com/bid/50384
http://www.ubuntu.com/usn/USN-1266-1
https://bugzilla.redhat.com/show_bug.cgi?id=749324
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/70991