GCVE - cpe:2.3:a:openldap:openldap:2.4.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openldap:openldap:2.4.7:*:*:*:*:*:*:*

part: a version: 2.4.7 update: *

Vendor	Openldap (`1ba99264-36a0-5bc0-a146-edb265704101`)
Product	Openldap (`60e3d26c-7115-51fd-8ea4-a15fe427b555`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openldap/openldap`	purl2cpe	2026-06-01 10:14:43.627871
`pkg:rpm/fedora/openldap`	purl2cpe	2026-06-01 10:14:43.627872

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4449`	vulnerable	2026-06-08 05:04:46.822523	Details available The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search. Published: 2014-02-05T18:00:00.000Z Updated: 2024-08-06T16:45:14.585Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.openldap.org/its/index.cgi/Incoming?id=7723 http://www.mandriva.com/security/advisories?name=MDVSA-2014:026 https://bugzilla.redhat.com/show_bug.cgi?id=1019490 http://www.debian.org/security/2015/dsa-3209	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2668`	vulnerable	2026-06-08 05:02:05.306760	Details available libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information. Published: 2012-06-17T01:00:00.000Z Updated: 2024-08-06T19:42:31.816Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/06/06/2 http://security.gentoo.org/glsa/glsa-201406-36.xml http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309 http://rhn.redhat.com/errata/RHSA-2012-1151.html http://www.openldap.org/its/index.cgi?findid=7285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1164`	vulnerable	2026-06-08 05:00:47.892242	Details available slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned. Published: 2012-06-29T19:00:00.000Z Updated: 2024-08-06T18:53:35.431Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201406-36.xml http://secunia.com/advisories/49607 http://secunia.com/advisories/48372 http://www.mandriva.com/security/advisories?name=MDVSA-2012:130 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4079`	vulnerable	2026-06-08 04:59:29.100862	Details available Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry. Published: 2011-10-27T20:00:00.000Z Updated: 2024-08-06T23:53:32.849Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201406-36.xml http://www.openwall.com/lists/oss-security/2011/10/26/5 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7059%3Bselectid=7059 https://bugzilla.redhat.com/show_bug.cgi?id=749324 http://www.ubuntu.com/usn/USN-1266-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1081`	vulnerable	2026-06-08 04:57:55.050626	Details available modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field. Published: 2011-03-20T01:00:00.000Z Updated: 2024-08-06T22:14:27.830Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201406-36.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/66239 http://openwall.com/lists/oss-security/2011/03/01/15 http://openwall.com/lists/oss-security/2011/03/01/11 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6768	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1025`	vulnerable	2026-06-08 04:56:40.933161	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1024`	vulnerable	2026-06-08 04:56:40.922601	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.