CVE-2011-4079

EPSS 6.75%
Veröffentlicht 27.10.2011 20:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openldap ≫ Openldap Version <= 2.4.26

Openldap ≫ Openldap Version1.0

Openldap ≫ Openldap Version1.0.1

Openldap ≫ Openldap Version1.0.2

Openldap ≫ Openldap Version1.0.3

Openldap ≫ Openldap Version1.1

Openldap ≫ Openldap Version1.1.0

Openldap ≫ Openldap Version1.1.1

Openldap ≫ Openldap Version1.1.2

Openldap ≫ Openldap Version1.1.3

Openldap ≫ Openldap Version1.1.4

Openldap ≫ Openldap Version1.2

Openldap ≫ Openldap Version1.2.0

Openldap ≫ Openldap Version1.2.1

Openldap ≫ Openldap Version1.2.2

Openldap ≫ Openldap Version1.2.3

Openldap ≫ Openldap Version1.2.4

Openldap ≫ Openldap Version1.2.5

Openldap ≫ Openldap Version1.2.6

Openldap ≫ Openldap Version1.2.7

Openldap ≫ Openldap Version1.2.8

Openldap ≫ Openldap Version1.2.9

Openldap ≫ Openldap Version1.2.10

Openldap ≫ Openldap Version1.2.11

Openldap ≫ Openldap Version1.2.12

Openldap ≫ Openldap Version1.2.13

Openldap ≫ Openldap Version2.0

Openldap ≫ Openldap Version2.0.0

Openldap ≫ Openldap Version2.0.1

Openldap ≫ Openldap Version2.0.2

Openldap ≫ Openldap Version2.0.3

Openldap ≫ Openldap Version2.0.4

Openldap ≫ Openldap Version2.0.5

Openldap ≫ Openldap Version2.0.6

Openldap ≫ Openldap Version2.0.7

Openldap ≫ Openldap Version2.0.8

Openldap ≫ Openldap Version2.0.9

Openldap ≫ Openldap Version2.0.10

Openldap ≫ Openldap Version2.0.11

Openldap ≫ Openldap Version2.0.11_9

Openldap ≫ Openldap Version2.0.11_11

Openldap ≫ Openldap Version2.0.11_11s

Openldap ≫ Openldap Version2.0.12

Openldap ≫ Openldap Version2.0.13

Openldap ≫ Openldap Version2.0.14

Openldap ≫ Openldap Version2.0.15

Openldap ≫ Openldap Version2.0.16

Openldap ≫ Openldap Version2.0.17

Openldap ≫ Openldap Version2.0.18

Openldap ≫ Openldap Version2.0.19

Openldap ≫ Openldap Version2.0.20

Openldap ≫ Openldap Version2.0.21

Openldap ≫ Openldap Version2.0.22

Openldap ≫ Openldap Version2.0.23

Openldap ≫ Openldap Version2.0.24

Openldap ≫ Openldap Version2.0.25

Openldap ≫ Openldap Version2.0.26

Openldap ≫ Openldap Version2.0.27

Openldap ≫ Openldap Version2.1.2

Openldap ≫ Openldap Version2.1.3

Openldap ≫ Openldap Version2.1.4

Openldap ≫ Openldap Version2.1.5

Openldap ≫ Openldap Version2.1.6

Openldap ≫ Openldap Version2.1.7

Openldap ≫ Openldap Version2.1.8

Openldap ≫ Openldap Version2.1.9

Openldap ≫ Openldap Version2.1.10

Openldap ≫ Openldap Version2.1.11

Openldap ≫ Openldap Version2.1.12

Openldap ≫ Openldap Version2.1.13

Openldap ≫ Openldap Version2.1.14

Openldap ≫ Openldap Version2.1.15

Openldap ≫ Openldap Version2.1.16

Openldap ≫ Openldap Version2.1.17

Openldap ≫ Openldap Version2.1.18

Openldap ≫ Openldap Version2.1.19

Openldap ≫ Openldap Version2.1.20

Openldap ≫ Openldap Version2.1.21

Openldap ≫ Openldap Version2.1.22

Openldap ≫ Openldap Version2.1.23

Openldap ≫ Openldap Version2.1.24

Openldap ≫ Openldap Version2.1.25

Openldap ≫ Openldap Version2.1.26

Openldap ≫ Openldap Version2.1.27

Openldap ≫ Openldap Version2.1.28

Openldap ≫ Openldap Version2.1.29

Openldap ≫ Openldap Version2.1.30

Openldap ≫ Openldap Version2.1_.20

Openldap ≫ Openldap Version2.2.0

Openldap ≫ Openldap Version2.2.1

Openldap ≫ Openldap Version2.2.4

Openldap ≫ Openldap Version2.2.5

Openldap ≫ Openldap Version2.2.6

Openldap ≫ Openldap Version2.2.7

Openldap ≫ Openldap Version2.2.8

Openldap ≫ Openldap Version2.2.9

Openldap ≫ Openldap Version2.2.10

Openldap ≫ Openldap Version2.2.11

Openldap ≫ Openldap Version2.2.12

Openldap ≫ Openldap Version2.2.13

Openldap ≫ Openldap Version2.2.14

Openldap ≫ Openldap Version2.2.15

Openldap ≫ Openldap Version2.2.16

Openldap ≫ Openldap Version2.2.17

Openldap ≫ Openldap Version2.2.18

Openldap ≫ Openldap Version2.2.19

Openldap ≫ Openldap Version2.2.20

Openldap ≫ Openldap Version2.2.21

Openldap ≫ Openldap Version2.2.22

Openldap ≫ Openldap Version2.2.23

Openldap ≫ Openldap Version2.2.24

Openldap ≫ Openldap Version2.2.25

Openldap ≫ Openldap Version2.2.26

Openldap ≫ Openldap Version2.2.27

Openldap ≫ Openldap Version2.3.4

Openldap ≫ Openldap Version2.3.5

Openldap ≫ Openldap Version2.3.6

Openldap ≫ Openldap Version2.3.7

Openldap ≫ Openldap Version2.3.8

Openldap ≫ Openldap Version2.3.9

Openldap ≫ Openldap Version2.3.10

Openldap ≫ Openldap Version2.3.11

Openldap ≫ Openldap Version2.3.12

Openldap ≫ Openldap Version2.3.13

Openldap ≫ Openldap Version2.3.14

Openldap ≫ Openldap Version2.3.15

Openldap ≫ Openldap Version2.3.16

Openldap ≫ Openldap Version2.3.17

Openldap ≫ Openldap Version2.3.18

Openldap ≫ Openldap Version2.3.19

Openldap ≫ Openldap Version2.3.20

Openldap ≫ Openldap Version2.3.21

Openldap ≫ Openldap Version2.3.22

Openldap ≫ Openldap Version2.3.23

Openldap ≫ Openldap Version2.3.24

Openldap ≫ Openldap Version2.3.25

Openldap ≫ Openldap Version2.3.26

Openldap ≫ Openldap Version2.3.27

Openldap ≫ Openldap Version2.3.28

Openldap ≫ Openldap Version2.3.29

Openldap ≫ Openldap Version2.3.30

Openldap ≫ Openldap Version2.3.31

Openldap ≫ Openldap Version2.3.32

Openldap ≫ Openldap Version2.3.33

Openldap ≫ Openldap Version2.3.34

Openldap ≫ Openldap Version2.3.35

Openldap ≫ Openldap Version2.3.36

Openldap ≫ Openldap Version2.3.37

Openldap ≫ Openldap Version2.3.38

Openldap ≫ Openldap Version2.3.39

Openldap ≫ Openldap Version2.3.40

Openldap ≫ Openldap Version2.3.41

Openldap ≫ Openldap Version2.3.42

Openldap ≫ Openldap Version2.3.43

Openldap ≫ Openldap Version2.4.3

Openldap ≫ Openldap Version2.4.6

Openldap ≫ Openldap Version2.4.7

Openldap ≫ Openldap Version2.4.8

Openldap ≫ Openldap Version2.4.9

Openldap ≫ Openldap Version2.4.10

Openldap ≫ Openldap Version2.4.11

Openldap ≫ Openldap Version2.4.12

Openldap ≫ Openldap Version2.4.13

Openldap ≫ Openldap Version2.4.14

Openldap ≫ Openldap Version2.4.15

Openldap ≫ Openldap Version2.4.16

Openldap ≫ Openldap Version2.4.17

Openldap ≫ Openldap Version2.4.18

Openldap ≫ Openldap Version2.4.19

Openldap ≫ Openldap Version2.4.20

Openldap ≫ Openldap Version2.4.21

Openldap ≫ Openldap Version2.4.22

Openldap ≫ Openldap Version2.4.23

Openldap ≫ Openldap Version2.4.24

Openldap ≫ Openldap Version2.4.25

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.75%	0.903

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:N/A:P

http://security.gentoo.org/glsa/glsa-201406-36.xml

http://secunia.com/advisories/46599

Vendor Advisory

http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=507238713b71208ec4f262f312cb495a302df9e9

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7059%3Bselectid=7059

http://www.openwall.com/lists/oss-security/2011/10/26/5

http://www.openwall.com/lists/oss-security/2011/10/26/9

http://www.securityfocus.com/bid/50384

http://www.ubuntu.com/usn/USN-1266-1

https://bugzilla.redhat.com/show_bug.cgi?id=749324

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/70991

https://nvd.nist.gov/vuln/detail/CVE-2011-4079

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-4079

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-4079

EUVD