CVE

Id
78822  
CVE No.
CVE-2015-1545  
Status
Candidate  
Description
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.  
Phase
Assigned (20150207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
718883 78822 CVE-2015-1545 MLIST:[oss-security] 20150207 Re: CVE request: two OpenLDAP DoS issues  View
718884 78822 CVE-2015-1545 URL:http://www.openwall.com/lists/oss-security/2015/02/07/3  View
718885 78822 CVE-2015-1545 CONFIRM:http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commit;h=c32e74763f77675b9e144126e375977ed6dc562c  View
718886 78822 CVE-2015-1545 CONFIRM:http://www.openldap.org/its/?findid=8027  View
718887 78822 CVE-2015-1545 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988  View
718888 78822 CVE-2015-1545 CONFIRM:https://support.apple.com/HT204659  View
718889 78822 CVE-2015-1545 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
718890 78822 CVE-2015-1545 APPLE:APPLE-SA-2015-04-08-2  View
718891 78822 CVE-2015-1545 URL:http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html  View
718892 78822 CVE-2015-1545 DEBIAN:DSA-3209  View
718893 78822 CVE-2015-1545 URL:http://www.debian.org/security/2015/dsa-3209  View
718894 78822 CVE-2015-1545 MANDRIVA:MDVSA-2015:073  View
718895 78822 CVE-2015-1545 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:073  View
718896 78822 CVE-2015-1545 MANDRIVA:MDVSA-2015:074  View
718897 78822 CVE-2015-1545 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:074  View
718898 78822 CVE-2015-1545 SUSE:openSUSE-SU-2015:1325  View
718899 78822 CVE-2015-1545 URL:http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html  View
718900 78822 CVE-2015-1545 BID:72519  View
718901 78822 CVE-2015-1545 URL:http://www.securityfocus.com/bid/72519  View
718902 78822 CVE-2015-1545 SECTRACK:1032399  View
718903 78822 CVE-2015-1545 URL:http://www.securitytracker.com/id/1032399  View
718904 78822 CVE-2015-1545 SECUNIA:62787  View
718905 78822 CVE-2015-1545 URL:http://secunia.com/advisories/62787  View
718906 78822 CVE-2015-1545 XF:openldap-cve20151545-dos(100937)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6386 JVNDB-2015-001706 Android 用 Siemens SPCanywhere アプリケーションにおける任意のコードを実行される脆弱性 Android 用 Siemens SPCanywhere アプリケーションは、コードのロード中に暗号化を使用しないため、任意のコードを実行される脆弱性が存在します。 CVE-2015-1597 78822 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001706.html  View