An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.
Weakness
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openldap | Openldap | 2.4 (including) | 2.4 (including) |
| Red Hat Enterprise Linux 6 | RedHat | openldap-0:2.4.40-5.el6 | * |
| Red Hat Enterprise Linux 7 | RedHat | openldap-0:2.4.40-8.el7 | * |
Potential Mitigations
References
- https://access.redhat.com/security/cve/cve-2014-8182
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182
- https://security-tracker.debian.org/tracker/CVE-2014-8182
- https://access.redhat.com/security/cve/cve-2014-8182
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182
- https://security-tracker.debian.org/tracker/CVE-2014-8182