CVE-2015-1545

Published: Feb 12, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.

Affected (28)

Products: Openldap: Openldap

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 2.4.13
Openldap Openldap	Version 2.4.14
Openldap Openldap	Version 2.4.15
Openldap Openldap	Version 2.4.16
Openldap Openldap	Version 2.4.17
Openldap Openldap	Version 2.4.18
Openldap Openldap	Version 2.4.19
Openldap Openldap	Version 2.4.20
Openldap Openldap	Version 2.4.21
Openldap Openldap	Version 2.4.22
Openldap Openldap	Version 2.4.23
Openldap Openldap	Version 2.4.24
Openldap Openldap	Version 2.4.25
Openldap Openldap	Version 2.4.26
Openldap Openldap	Version 2.4.27
Openldap Openldap	Version 2.4.28
Openldap Openldap	Version 2.4.29
Openldap Openldap	Version 2.4.30
Openldap Openldap	Version 2.4.31
Openldap Openldap	Version 2.4.32
Openldap Openldap	Version 2.4.33
Openldap Openldap	Version 2.4.34
Openldap Openldap	Version 2.4.35
Openldap Openldap	Version 2.4.36
Openldap Openldap	Version 2.4.37
Openldap Openldap	Version 2.4.38
Openldap Openldap	Version 2.4.39
Openldap Openldap	Version 2.4.40

References (36)

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2019/Dec/26

Source: cve@mitre.org

http://secunia.com/advisories/62787

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3209

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:073

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:074

Source: cve@mitre.org

http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c

Source: cve@mitre.org

http://www.openldap.org/its/?findid=8027

Source: cve@mitre.org

ExploitVendor Advisory

http://www.openwall.com/lists/oss-security/2015/02/07/3

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/72519

Source: cve@mitre.org

http://www.securitytracker.com/id/1032399

Source: cve@mitre.org

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/100937

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Dec/23

Source: cve@mitre.org

https://support.apple.com/HT204659

Source: cve@mitre.org

https://support.apple.com/kb/HT210788

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2019/Dec/26

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/62787

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3209

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:073

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:074

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openldap.org/its/?findid=8027

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.openwall.com/lists/oss-security/2015/02/07/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/72519

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1032399

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/100937

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Dec/23

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT204659

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT210788

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.