CVE-2015-1545
Beschrijving
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Vendors
Affected products
References
- lists.apple.com
- lists.opensuse.org
- seclists.org
- secunia.com
- www.debian.org
- www.mandriva.com
- www.mandriva.com
- www.openldap.org
- www.openldap.org
- www.openwall.com
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- bugs.debian.org
- exchange.xforce.ibmcloud.com
- seclists.org
- support.apple.com
- support.apple.com