| Package | Affected versions | Patched versions |
|---|---|---|
| openldap | = 2.4.13= 2.4.14= 2.4.15= 2.4.16= 2.4.17= 2.4.18= 2.4.19= 2.4.20= 2.4.21= 2.4.22= 2.4.23= 2.4.24= 2.4.25= 2.4.26= 2.4.27= 2.4.28= 2.4.29= 2.4.30= 2.4.31= 2.4.32= 2.4.33= 2.4.34= 2.4.35= 2.4.36= 2.4.37= 2.4.38= 2.4.39= 2.4.40 |
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free