NVD

Id
10610  
Name
CVE-2011-4079  
Description
Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-10-27  
Modified Date
2017-01-06  
Seq
2011-4079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59967 10610 CVE-2011-4079 GLSA-201406-36  View
59968 10610 CVE-2011-4079 http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=507238713b71208ec4f262f312cb495a302df9e9  View
59969 10610 CVE-2011-4079 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7059;selectid=7059  View
59970 10610 CVE-2011-4079 [oss-security] 20111026 CVE Request: openldap2 UTF8StringNormalize() can cause a (one-byte) buffer overflow  View
59971 10610 CVE-2011-4079 [oss-security] 20111026 Re: CVE Request: openldap2 UTF8StringNormalize() can cause a (one-byte) buffer overflow  View
59972 10610 CVE-2011-4079 50384  View
59973 10610 CVE-2011-4079 USN-1266-1  View
59974 10610 CVE-2011-4079 openldap-utf8stringnormalize-dos(70991)  View
59975 10610 CVE-2011-4079 https://bugzilla.redhat.com/show_bug.cgi?id=749324  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32458 JVNDB-2011-002698 OpenLDAP の UTF8StringNormalize 関数における一つずれエラーの脆弱性 OpenLDAP の UTF8StringNormalize 関数には、一つずれ (Off-by-one) エラーの脆弱性が存在します。 CVE-2011-4079 51986 CVE-2011-4079 10610 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002698.html 2011-10-06 2011-11-04 View