| Package | Affected versions | Patched versions |
|---|---|---|
| policy auditor | < 6.5.1 | 6.5.1 |
| openldap | ≤ 2.4.45 | |
| blockchain platform | < 21.1.2 | 21.1.2 |
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free