CVE-2008-2952

Published: Jul 1, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

Affected (47)

Products: Openldap: Openldap

Openldap

1 product

Openldap

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 2.2.4
Openldap Openldap	Version 2.2.5
Openldap Openldap	Version 2.2.6
Openldap Openldap	Version 2.2.7
Openldap Openldap	Version 2.2.8
Openldap Openldap	Version 2.2.9
Openldap Openldap	Version 2.3.10
Openldap Openldap	Version 2.3.11
Openldap Openldap	Version 2.3.12
Openldap Openldap	Version 2.3.13
Openldap Openldap	Version 2.3.14
Openldap Openldap	Version 2.3.15
Openldap Openldap	Version 2.3.16
Openldap Openldap	Version 2.3.17
Openldap Openldap	Version 2.3.18
Openldap Openldap	Version 2.3.19
Openldap Openldap	Version 2.3.20
Openldap Openldap	Version 2.3.21
Openldap Openldap	Version 2.3.22
Openldap Openldap	Version 2.3.23
Openldap Openldap	Version 2.3.24
Openldap Openldap	Version 2.3.25
Openldap Openldap	Version 2.3.26
Openldap Openldap	Version 2.3.27
Openldap Openldap	Version 2.3.28
Openldap Openldap	Version 2.3.29
Openldap Openldap	Version 2.3.30
Openldap Openldap	Version 2.3.31
Openldap Openldap	Version 2.3.32
Openldap Openldap	Version 2.3.33
Openldap Openldap	Version 2.3.34
Openldap Openldap	Version 2.3.35
Openldap Openldap	Version 2.3.36
Openldap Openldap	Version 2.3.37
Openldap Openldap	Version 2.3.38
Openldap Openldap	Version 2.3.39
Openldap Openldap	Version 2.3.40
Openldap Openldap	Version 2.3.41
Openldap Openldap	Version 2.3.42
Openldap Openldap	Version 2.3.43
Openldap Openldap	Version 2.3.4
Openldap Openldap	Version 2.3.5
Openldap Openldap	Version 2.3.6
Openldap Openldap	Version 2.3.7
Openldap Openldap	Version 2.3.8
Openldap Openldap	Version 2.3.9
Openldap Openldap	Version 2.4.10

Related CWEs

CWE-399

References (62)

http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/30853

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30917

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30996

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31326

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31364

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31436

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32254

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32316

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200808-09.xml

Source: cve@mitre.org

http://wiki.rpath.com/Advisories:rPSA-2008-0249

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1650

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:144

Source: cve@mitre.org

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580

Source: cve@mitre.org

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580%3Bselectid=5580

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/01/2

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/13/2

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0583.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/495320/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30013

Source: cve@mitre.org

http://www.securitytracker.com/id?1020405

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-634-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1978/references

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2008/2268

Source: cve@mitre.org

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-08-052/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43515

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2645

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10662

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00109.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00129.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html