CVE-2010-0212
EUVD-2010-024328.07.2010, 12:48
OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openldap | openldap | 2.4.22 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| openldap |
| ||||||||||
| openldap2.2 |
| ||||||||||
| openldap2.3 |
|
Common Weakness Enumeration
References