CVE-2015-1545
Apple Security Advisory 2019-12-10-3
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
La función deref_parseCtrl en servers/slapd/overlays/deref.c en OpenLDAP 2.4.13 hasta 2.4.40 permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída) a través de una lista de atributos vacía en un control de referencia en una solicitud de búsqueda.
It was discovered that OpenLDAP incorrectly handled certain search queries that returned empty attributes. A remote attacker could use this issue to cause OpenLDAP to assert, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. Michael Vishchers discovered that OpenLDAP improperly counted references when the rwm overlay was used. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service. Various other issues were also addressed.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-02-07 CVE Reserved
- 2015-02-12 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (18)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2019/Dec/26 | Mailing List |
|
| http://secunia.com/advisories/62787 | Third Party Advisory | |
| http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c | X_refsource_confirm | |
| http://www.openwall.com/lists/oss-security/2015/02/07/3 | Mailing List |
|
| http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html | X_refsource_confirm |
|
| http://www.securityfocus.com/bid/72519 | Vdb Entry | |
| http://www.securitytracker.com/id/1032399 | Vdb Entry | |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/100937 | Vdb Entry | |
| https://seclists.org/bugtraq/2019/Dec/23 | Mailing List |
|
| https://support.apple.com/HT204659 | X_refsource_confirm |
|
| https://support.apple.com/kb/HT210788 | X_refsource_confirm |
|
| URL | Date | SRC |
|---|---|---|
| http://www.openldap.org/its/?findid=8027 | 2024-08-06 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.13 Search vendor "Openldap" for product "Openldap" and version "2.4.13" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.14 Search vendor "Openldap" for product "Openldap" and version "2.4.14" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.15 Search vendor "Openldap" for product "Openldap" and version "2.4.15" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.16 Search vendor "Openldap" for product "Openldap" and version "2.4.16" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.17 Search vendor "Openldap" for product "Openldap" and version "2.4.17" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.18 Search vendor "Openldap" for product "Openldap" and version "2.4.18" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.19 Search vendor "Openldap" for product "Openldap" and version "2.4.19" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.20 Search vendor "Openldap" for product "Openldap" and version "2.4.20" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.21 Search vendor "Openldap" for product "Openldap" and version "2.4.21" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.22 Search vendor "Openldap" for product "Openldap" and version "2.4.22" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.23 Search vendor "Openldap" for product "Openldap" and version "2.4.23" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.24 Search vendor "Openldap" for product "Openldap" and version "2.4.24" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.25 Search vendor "Openldap" for product "Openldap" and version "2.4.25" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.26 Search vendor "Openldap" for product "Openldap" and version "2.4.26" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.27 Search vendor "Openldap" for product "Openldap" and version "2.4.27" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.28 Search vendor "Openldap" for product "Openldap" and version "2.4.28" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.29 Search vendor "Openldap" for product "Openldap" and version "2.4.29" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.30 Search vendor "Openldap" for product "Openldap" and version "2.4.30" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.31 Search vendor "Openldap" for product "Openldap" and version "2.4.31" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.32 Search vendor "Openldap" for product "Openldap" and version "2.4.32" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.33 Search vendor "Openldap" for product "Openldap" and version "2.4.33" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.34 Search vendor "Openldap" for product "Openldap" and version "2.4.34" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.35 Search vendor "Openldap" for product "Openldap" and version "2.4.35" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.36 Search vendor "Openldap" for product "Openldap" and version "2.4.36" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.37 Search vendor "Openldap" for product "Openldap" and version "2.4.37" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.38 Search vendor "Openldap" for product "Openldap" and version "2.4.38" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.39 Search vendor "Openldap" for product "Openldap" and version "2.4.39" | - |
Affected
| ||||||
| Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.40 Search vendor "Openldap" for product "Openldap" and version "2.4.40" | - |
Affected
| ||||||