NVD

Id
40054  
Name
CVE-2013-4449  
Description
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2014-02-05  
Modified Date
2016-12-07  
Seq
2013-4449  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203779 40054 CVE-2013-4449 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
203780 40054 CVE-2013-4449 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
203781 40054 CVE-2013-4449 RHSA-2014:0126  View
203782 40054 CVE-2013-4449 RHSA-2014:0206  View
203783 40054 CVE-2013-4449 20140401 Cisco Unified Communications Manager Denial of Service Vulnerability  View
203784 40054 CVE-2013-4449 DSA-3209  View
203785 40054 CVE-2013-4449 MDVSA-2014:026  View
203786 40054 CVE-2013-4449 http://www.openldap.org/its/index.cgi/Incoming?id=7723  View
203787 40054 CVE-2013-4449 [oss-security] 20131018 Re: CVE request: slapd segfaults on certain queries with rwm overlay enabled  View
203788 40054 CVE-2013-4449 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
203789 40054 CVE-2013-4449 63190  View
203790 40054 CVE-2013-4449 1029711  View
203791 40054 CVE-2013-4449 https://bugzilla.redhat.com/show_bug.cgi?id=1019490  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24423 JVNDB-2013-005998 OpenLDAP の rwm オーバーレイにおけるサービス運用妨害 (DoS) の脆弱性 OpenLDAP の rwm オーバーレイは、参照を適切にカウントしないため、サービス運用妨害 (slapd クラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4449 64391 CVE-2013-4449 40054 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005998.html 2013-11-04 2015-08-10 View