| Package | Affected versions | Patched versions |
|---|---|---|
| openldap | ≤ 2.1.12 |
ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free