CVE-2013-4449

Published: Feb 5, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.

Affected (33)

Products: Debian: Debian Linux · Openldap: Openldap

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration B

31 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Up to 2.4.36
Openldap Openldap	Version 2.4.10
Openldap Openldap	Version 2.4.11
Openldap Openldap	Version 2.4.12
Openldap Openldap	Version 2.4.13
Openldap Openldap	Version 2.4.14
Openldap Openldap	Version 2.4.15
Openldap Openldap	Version 2.4.16
Openldap Openldap	Version 2.4.17
Openldap Openldap	Version 2.4.18
Openldap Openldap	Version 2.4.19
Openldap Openldap	Version 2.4.20
Openldap Openldap	Version 2.4.21
Openldap Openldap	Version 2.4.22
Openldap Openldap	Version 2.4.23
Openldap Openldap	Version 2.4.24
Openldap Openldap	Version 2.4.25
Openldap Openldap	Version 2.4.26
Openldap Openldap	Version 2.4.27
Openldap Openldap	Version 2.4.28
Openldap Openldap	Version 2.4.29
Openldap Openldap	Version 2.4.30
Openldap Openldap	Version 2.4.31
Openldap Openldap	Version 2.4.32
Openldap Openldap	Version 2.4.33
Openldap Openldap	Version 2.4.34
Openldap Openldap	Version 2.4.35
Openldap Openldap	Version 2.4.6
Openldap Openldap	Version 2.4.7
Openldap Openldap	Version 2.4.8
Openldap Openldap	Version 2.4.9

Related CWEs

References (32)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0126.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0206.html

Source: secalert@redhat.com

http://seclists.org/fulldisclosure/2019/Dec/26

Source: secalert@redhat.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3209

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2014:026

Source: secalert@redhat.com

http://www.openldap.org/its/index.cgi/Incoming?id=7723

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/10/19/3

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/63190

Source: secalert@redhat.com

http://www.securitytracker.com/id/1029711

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1019490

Source: secalert@redhat.com

https://seclists.org/bugtraq/2019/Dec/23

Source: secalert@redhat.com

https://support.apple.com/kb/HT210788

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: af854a3a-2127-422b-91ae-364da2661108

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0126.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0206.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2019/Dec/26

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3209

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2014:026

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openldap.org/its/index.cgi/Incoming?id=7723

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/10/19/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/63190

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1029711

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1019490

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Dec/23

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT210788

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.