OpenLDAP 2.4.21
Approved changes feed: RSS · Atom
cpe:2.3:a:openldap:openldap:2.4.21:*:*:*:*:*:*:*
part: a version: 2.4.21 update: *
| Vendor | Openldap (1ba99264-36a0-5bc0-a146-edb265704101) |
|---|---|
| Product | Openldap (60e3d26c-7115-51fd-8ea4-a15fe427b555) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openldap/openldap |
purl2cpe | 2026-06-01 10:14:43.619314 |
pkg:rpm/fedora/openldap |
purl2cpe | 2026-06-01 10:14:43.619316 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-1545 |
vulnerable | 2026-06-08 05:06:25.794465 |
Details available
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Published: 2015-02-12T16:00:00.000Z
Updated: 2024-08-06T04:47:16.804Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4449 |
vulnerable | 2026-06-08 05:04:46.830549 |
Details available
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.
Published: 2014-02-05T18:00:00.000Z
Updated: 2024-08-06T16:45:14.585Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2668 |
vulnerable | 2026-06-08 05:02:05.314160 |
Details available
libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.
Published: 2012-06-17T01:00:00.000Z
Updated: 2024-08-06T19:42:31.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1164 |
vulnerable | 2026-06-08 05:00:47.899761 |
Details available
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
Published: 2012-06-29T19:00:00.000Z
Updated: 2024-08-06T18:53:35.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4079 |
vulnerable | 2026-06-08 04:59:29.109830 |
Details available
Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.
Published: 2011-10-27T20:00:00.000Z
Updated: 2024-08-06T23:53:32.849Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1081 |
vulnerable | 2026-06-08 04:57:55.059875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1025 |
vulnerable | 2026-06-08 04:56:40.933396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1024 |
vulnerable | 2026-06-08 04:56:40.931196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.