CVE-2010-0211
Critical
Description
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Openldap
PublishedJul 28, 2010
First seenJul 28, 2010
How to fix
Update
- apple mac_os_x10.6.5 or later
- apple mac_os_x_server10.6.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openldap openldap | 2.4.22 | — |
| vmware esxi | 4.0, 4.1 | — |
| opensuse opensuse | 11.0 | — |
| apple mac_os_x | 10.6.0 ≤ v < 10.6.5 | 10.6.5 |
| apple mac_os_x_server | 10.6.0 ≤ v < 10.6.5 | 10.6.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.