CVE-2001-0977 — Openldap vulnerability

5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
2.7%
top 14.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Debian LinuxMandrakesoft Mandrake LinuxMandrakesoft Mandrake Linux Corporate Server+3 more
Timeline
PublishedJul 16
Latest updateApr 30

Description

slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶NVDopenldap/openldap30 versions+29
▶NVDredhat/linux6.2, 7.0, 7.1+2
▶NVDmandrakesoft/mandrake_linux7.1, 7.2, 8.0+2

Also affects: Debian Linux 2.2

Patches

Patch: www.cert.org ↗Patch: www.kb.cert.org ↗Patch: www.linux-mandrake.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qh43-w96h-9v7c: slapd in OpenLDAP 1↗2022-04-30
▶
CVEList
CVE-2001-0977: slapd in OpenLDAP 1↗2002-06-25
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2001-07-16
▶

💬Community

1
Bugzilla
CVE-2001-0977 security flaw↗2018-08-16
▶
CVE-2001-0977 — Openldap vulnerability | cvebase