CVE-2014-8182

Published: Jan 2, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

Affected (4)

Products: Openldap: Openldap · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 2.4

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Related CWEs

CWE-193

Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References (8)

https://access.redhat.com/security/cve/cve-2014-8182

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182

Source: secalert@redhat.com

ExploitIssue TrackingPatchThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182

Source: secalert@redhat.com

ExploitIssue TrackingPatchThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2014-8182

Source: secalert@redhat.com

PatchThird Party Advisory

https://access.redhat.com/security/cve/cve-2014-8182

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2014-8182

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.