GCVE - cpe:2.3:a:openldap:openldap:2.4.29:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openldap:openldap:2.4.29:*:*:*:*:*:*:*

part: a version: 2.4.29 update: *

Vendor	Openldap (`1ba99264-36a0-5bc0-a146-edb265704101`)
Product	Openldap (`60e3d26c-7115-51fd-8ea4-a15fe427b555`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openldap/openldap`	purl2cpe	2026-06-01 10:14:43.619338
`pkg:rpm/fedora/openldap`	purl2cpe	2026-06-01 10:14:43.619340

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-1545`	vulnerable	2026-06-08 05:06:25.798973	Details available The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request. Published: 2015-02-12T16:00:00.000Z Updated: 2024-08-06T04:47:16.804Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/72519 http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c https://support.apple.com/HT204659 https://exchange.xforce.ibmcloud.com/vulnerabilities/100937 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9713`	vulnerable	2026-06-08 05:06:12.842777	Details available The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors. Published: 2015-04-01T14:00:00.000Z Updated: 2024-08-06T13:55:04.632Z Open on db.gcve.eu Reference links https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406 http://www.ubuntu.com/usn/USN-2742-1 http://www.debian.org/security/2015/dsa-3209 http://www.securityfocus.com/bid/73217 http://www.openwall.com/lists/oss-security/2015/03/29/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4449`	vulnerable	2026-06-08 05:04:46.835359	Details available The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search. Published: 2014-02-05T18:00:00.000Z Updated: 2024-08-06T16:45:14.585Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.openldap.org/its/index.cgi/Incoming?id=7723 http://www.mandriva.com/security/advisories?name=MDVSA-2014:026 https://bugzilla.redhat.com/show_bug.cgi?id=1019490 http://www.debian.org/security/2015/dsa-3209	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2668`	vulnerable	2026-06-08 05:02:05.318762	Details available libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information. Published: 2012-06-17T01:00:00.000Z Updated: 2024-08-06T19:42:31.816Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/06/06/2 http://security.gentoo.org/glsa/glsa-201406-36.xml http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309 http://rhn.redhat.com/errata/RHSA-2012-1151.html http://www.openldap.org/its/index.cgi?findid=7285	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.