CVE-2007-5707

Published: Oct 30, 2007Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

Affected (119)

Products: Openldap: Openldap

Openldap

1 product

Openldap

Configuration A

119 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 1.0.1
Openldap Openldap	Version 1.0.2
Openldap Openldap	Version 1.0.3
Openldap Openldap	Version 1.0
Openldap Openldap	Version 1.1.0
Openldap Openldap	Version 1.1.1
Openldap Openldap	Version 1.1.2
Openldap Openldap	Version 1.1.3
Openldap Openldap	Version 1.1.4
Openldap Openldap	Version 1.1
Openldap Openldap	Version 1.2.0
Openldap Openldap	Version 1.2.10
Openldap Openldap	Version 1.2.11
Openldap Openldap	Version 1.2.12
Openldap Openldap	Version 1.2.13
Openldap Openldap	Version 1.2.1
Openldap Openldap	Version 1.2.2
Openldap Openldap	Version 1.2.3
Openldap Openldap	Version 1.2.4
Openldap Openldap	Version 1.2.5
Openldap Openldap	Version 1.2.6
Openldap Openldap	Version 1.2.7
Openldap Openldap	Version 1.2.8
Openldap Openldap	Version 1.2.9
Openldap Openldap	Version 1.2
Openldap Openldap	Version 2.0.0
Openldap Openldap	Version 2.0.10
Openldap Openldap	Version 2.0.11
Openldap Openldap	Version 2.0.11_11
Openldap Openldap	Version 2.0.11_11s
Openldap Openldap	Version 2.0.11_9
Openldap Openldap	Version 2.0.12
Openldap Openldap	Version 2.0.13
Openldap Openldap	Version 2.0.14
Openldap Openldap	Version 2.0.15
Openldap Openldap	Version 2.0.16
Openldap Openldap	Version 2.0.17
Openldap Openldap	Version 2.0.18
Openldap Openldap	Version 2.0.19
Openldap Openldap	Version 2.0.1
Openldap Openldap	Version 2.0.20
Openldap Openldap	Version 2.0.21
Openldap Openldap	Version 2.0.22
Openldap Openldap	Version 2.0.23
Openldap Openldap	Version 2.0.24
Openldap Openldap	Version 2.0.25
Openldap Openldap	Version 2.0.26
Openldap Openldap	Version 2.0.27
Openldap Openldap	Version 2.0.2
Openldap Openldap	Version 2.0.3
Openldap Openldap	Version 2.0.4
Openldap Openldap	Version 2.0.5
Openldap Openldap	Version 2.0.6
Openldap Openldap	Version 2.0.7
Openldap Openldap	Version 2.0.8
Openldap Openldap	Version 2.0.9
Openldap Openldap	Version 2.0
Openldap Openldap	Version 2.1.10
Openldap Openldap	Version 2.1.11
Openldap Openldap	Version 2.1.12
Openldap Openldap	Version 2.1.13
Openldap Openldap	Version 2.1.14
Openldap Openldap	Version 2.1.15
Openldap Openldap	Version 2.1.16
Openldap Openldap	Version 2.1.17
Openldap Openldap	Version 2.1.18
Openldap Openldap	Version 2.1.19
Openldap Openldap	Version 2.1.20
Openldap Openldap	Version 2.1.21
Openldap Openldap	Version 2.1.22
Openldap Openldap	Version 2.1.23
Openldap Openldap	Version 2.1.24
Openldap Openldap	Version 2.1.25
Openldap Openldap	Version 2.1.26
Openldap Openldap	Version 2.1.27
Openldap Openldap	Version 2.1.28
Openldap Openldap	Version 2.1.29
Openldap Openldap	Version 2.1.2
Openldap Openldap	Version 2.1.30
Openldap Openldap	Version 2.1.3
Openldap Openldap	Version 2.1.4
Openldap Openldap	Version 2.1.5
Openldap Openldap	Version 2.1.6
Openldap Openldap	Version 2.1.7
Openldap Openldap	Version 2.1.8
Openldap Openldap	Version 2.1.9
Openldap Openldap	Version 2.1_.20
Openldap Openldap	Version 2.2.0
Openldap Openldap	Version 2.2.10
Openldap Openldap	Version 2.2.11
Openldap Openldap	Version 2.2.12
Openldap Openldap	Version 2.2.13
Openldap Openldap	Version 2.2.14
Openldap Openldap	Version 2.2.15
Openldap Openldap	Version 2.2.16
Openldap Openldap	Version 2.2.17
Openldap Openldap	Version 2.2.18
Openldap Openldap	Version 2.2.19
Openldap Openldap	Version 2.2.1
Openldap Openldap	Version 2.2.20
Openldap Openldap	Version 2.2.21
Openldap Openldap	Version 2.2.22
Openldap Openldap	Version 2.2.23
Openldap Openldap	Version 2.2.24
Openldap Openldap	Version 2.2.25
Openldap Openldap	Version 2.2.26
Openldap Openldap	Version 2.2.27
Openldap Openldap	Version 2.2.28_r2
Openldap Openldap	Version 2.2.29_rev_1.134
Openldap Openldap	Version 2.2.4
Openldap Openldap	Version 2.2.5
Openldap Openldap	Version 2.2.6
Openldap Openldap	Version 2.2.7
Openldap Openldap	Version 2.2.8
Openldap Openldap	Version 2.2.9
Openldap Openldap	Version 2.3.27_2.20061018
Openldap Openldap	Version 2.3.28_2.20061022
Openldap Openldap	Version 2.3.28_20061022
Openldap Openldap	Version 2.3.28_e1.0.0

Related CWEs

CWE-399

References (52)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440632

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html

Source: secalert@redhat.com

http://secunia.com/advisories/27424

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/27587

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27596

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27683

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27756

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27868

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29461

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29682

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200803-28.xml

Source: secalert@redhat.com

http://support.apple.com/kb/HT3937

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1541

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:215

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_24_sr.html

Source: secalert@redhat.com

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5119

Source: secalert@redhat.com

http://www.openldap.org/lists/openldap-announce/200710/msg00001.html

Source: secalert@redhat.com

Patch

http://www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1037.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1038.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26245

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018924

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-551-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3645

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2009/3184

Source: secalert@redhat.com

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10183

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440632