CVE Vulnerabilities

CVE-2008-2952

Published: Jul 01, 2008 | Modified: Oct 11, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

Affected Software

Name Vendor Start Version End Version
Openldap Openldap 2.2.4 2.2.4
Openldap Openldap 2.2.5 2.2.5
Openldap Openldap 2.2.6 2.2.6
Openldap Openldap 2.2.7 2.2.7
Openldap Openldap 2.2.8 2.2.8
Openldap Openldap 2.2.9 2.2.9
Openldap Openldap 2.3.4 2.3.4
Openldap Openldap 2.3.5 2.3.5
Openldap Openldap 2.3.6 2.3.6
Openldap Openldap 2.3.7 2.3.7
Openldap Openldap 2.3.8 2.3.8
Openldap Openldap 2.3.9 2.3.9
Openldap Openldap 2.3.10 2.3.10
Openldap Openldap 2.3.11 2.3.11
Openldap Openldap 2.3.12 2.3.12
Openldap Openldap 2.3.13 2.3.13
Openldap Openldap 2.3.14 2.3.14
Openldap Openldap 2.3.15 2.3.15
Openldap Openldap 2.3.16 2.3.16
Openldap Openldap 2.3.17 2.3.17
Openldap Openldap 2.3.18 2.3.18
Openldap Openldap 2.3.19 2.3.19
Openldap Openldap 2.3.20 2.3.20
Openldap Openldap 2.3.21 2.3.21
Openldap Openldap 2.3.22 2.3.22
Openldap Openldap 2.3.23 2.3.23
Openldap Openldap 2.3.24 2.3.24
Openldap Openldap 2.3.25 2.3.25
Openldap Openldap 2.3.26 2.3.26
Openldap Openldap 2.3.27 2.3.27
Openldap Openldap 2.3.28 2.3.28
Openldap Openldap 2.3.29 2.3.29
Openldap Openldap 2.3.30 2.3.30
Openldap Openldap 2.3.31 2.3.31
Openldap Openldap 2.3.32 2.3.32
Openldap Openldap 2.3.33 2.3.33
Openldap Openldap 2.3.34 2.3.34
Openldap Openldap 2.3.35 2.3.35
Openldap Openldap 2.3.36 2.3.36
Openldap Openldap 2.3.37 2.3.37
Openldap Openldap 2.3.38 2.3.38
Openldap Openldap 2.3.39 2.3.39
Openldap Openldap 2.3.40 2.3.40
Openldap Openldap 2.3.41 2.3.41
Openldap Openldap 2.3.42 2.3.42
Openldap Openldap 2.3.43 2.3.43
Openldap Openldap 2.4.10 2.4.10
Red Hat Enterprise Linux 4 RedHat openldap-0:2.2.13-8.el4_6.5 *
Red Hat Enterprise Linux 5 RedHat openldap-0:2.3.27-8.el5_2.4 *
Openldap Ubuntu upstream *
Openldap2.2 Ubuntu dapper *
Openldap2.3 Ubuntu feisty *
Openldap2.3 Ubuntu gutsy *
Openldap2.3 Ubuntu hardy *

References