GCVE - cpe:2.3:a:openldap:openldap:2.4.33:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openldap:openldap:2.4.33:*:*:*:*:*:*:*

part: a version: 2.4.33 update: *

Vendor	Openldap (`1ba99264-36a0-5bc0-a146-edb265704101`)
Product	Openldap (`60e3d26c-7115-51fd-8ea4-a15fe427b555`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openldap/openldap`	purl2cpe	2026-06-01 10:14:43.627790
`pkg:rpm/fedora/openldap`	purl2cpe	2026-06-01 10:14:43.627791

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-1545`	vulnerable	2026-06-08 05:06:25.801036	Details available The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request. Published: 2015-02-12T16:00:00.000Z Updated: 2024-08-06T04:47:16.804Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/72519 http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c https://support.apple.com/HT204659 https://exchange.xforce.ibmcloud.com/vulnerabilities/100937 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9713`	vulnerable	2026-06-08 05:06:12.844892	Details available The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors. Published: 2015-04-01T14:00:00.000Z Updated: 2024-08-06T13:55:04.632Z Open on db.gcve.eu Reference links https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406 http://www.ubuntu.com/usn/USN-2742-1 http://www.debian.org/security/2015/dsa-3209 http://www.securityfocus.com/bid/73217 http://www.openwall.com/lists/oss-security/2015/03/29/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4449`	vulnerable	2026-06-08 05:04:46.837593	Details available The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search. Published: 2014-02-05T18:00:00.000Z Updated: 2024-08-06T16:45:14.585Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.openldap.org/its/index.cgi/Incoming?id=7723 http://www.mandriva.com/security/advisories?name=MDVSA-2014:026 https://bugzilla.redhat.com/show_bug.cgi?id=1019490 http://www.debian.org/security/2015/dsa-3209	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.