GCVE - cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:*

part: a version: 2.4.26 update: *

Vendor	Openldap (`1ba99264-36a0-5bc0-a146-edb265704101`)
Product	Openldap (`60e3d26c-7115-51fd-8ea4-a15fe427b555`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openldap/openldap`	purl2cpe	2026-06-01 10:14:43.619329
`pkg:rpm/fedora/openldap`	purl2cpe	2026-06-01 10:14:43.619331

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-1545`	vulnerable	2026-06-08 05:06:25.797421	Details available The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request. Published: 2015-02-12T16:00:00.000Z Updated: 2024-08-06T04:47:16.804Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/72519 http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c https://support.apple.com/HT204659 https://exchange.xforce.ibmcloud.com/vulnerabilities/100937 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9713`	vulnerable	2026-06-08 05:06:12.841232	Details available The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors. Published: 2015-04-01T14:00:00.000Z Updated: 2024-08-06T13:55:04.632Z Open on db.gcve.eu Reference links https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406 http://www.ubuntu.com/usn/USN-2742-1 http://www.debian.org/security/2015/dsa-3209 http://www.securityfocus.com/bid/73217 http://www.openwall.com/lists/oss-security/2015/03/29/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4449`	vulnerable	2026-06-08 05:04:46.833576	Details available The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search. Published: 2014-02-05T18:00:00.000Z Updated: 2024-08-06T16:45:14.585Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.openldap.org/its/index.cgi/Incoming?id=7723 http://www.mandriva.com/security/advisories?name=MDVSA-2014:026 https://bugzilla.redhat.com/show_bug.cgi?id=1019490 http://www.debian.org/security/2015/dsa-3209	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2668`	vulnerable	2026-06-08 05:02:05.316886	Details available libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information. Published: 2012-06-17T01:00:00.000Z Updated: 2024-08-06T19:42:31.816Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/06/06/2 http://security.gentoo.org/glsa/glsa-201406-36.xml http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309 http://rhn.redhat.com/errata/RHSA-2012-1151.html http://www.openldap.org/its/index.cgi?findid=7285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1164`	vulnerable	2026-06-08 05:00:47.902707	Details available slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned. Published: 2012-06-29T19:00:00.000Z Updated: 2024-08-06T18:53:35.431Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201406-36.xml http://secunia.com/advisories/49607 http://secunia.com/advisories/48372 http://www.mandriva.com/security/advisories?name=MDVSA-2012:130 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.