CVE-2015-1545
 
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
La función deref_parseCtrl en servers/slapd/overlays/deref.c en OpenLDAP 2.4.13 hasta 2.4.40 permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída) a través de una lista de atributos vacía en un control de referencia en una solicitud de búsqueda.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-02-07 CVE Reserved
- 2015-02-12 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2024-09-24 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (18)
URL | Tag | Source |
---|---|---|
http://seclists.org/fulldisclosure/2019/Dec/26 | Mailing List | |
http://secunia.com/advisories/62787 | Third Party Advisory | |
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c | X_refsource_confirm | |
http://www.openwall.com/lists/oss-security/2015/02/07/3 | Mailing List | |
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html | X_refsource_confirm | |
http://www.securityfocus.com/bid/72519 | Vdb Entry | |
http://www.securitytracker.com/id/1032399 | Vdb Entry | |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988 | X_refsource_confirm | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/100937 | Vdb Entry | |
https://seclists.org/bugtraq/2019/Dec/23 | Mailing List | |
https://support.apple.com/HT204659 | X_refsource_confirm | |
https://support.apple.com/kb/HT210788 | X_refsource_confirm |
URL | Date | SRC |
---|---|---|
http://www.openldap.org/its/?findid=8027 | 2024-08-06 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.13 Search vendor "Openldap" for product "Openldap" and version "2.4.13" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.14 Search vendor "Openldap" for product "Openldap" and version "2.4.14" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.15 Search vendor "Openldap" for product "Openldap" and version "2.4.15" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.16 Search vendor "Openldap" for product "Openldap" and version "2.4.16" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.17 Search vendor "Openldap" for product "Openldap" and version "2.4.17" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.18 Search vendor "Openldap" for product "Openldap" and version "2.4.18" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.19 Search vendor "Openldap" for product "Openldap" and version "2.4.19" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.20 Search vendor "Openldap" for product "Openldap" and version "2.4.20" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.21 Search vendor "Openldap" for product "Openldap" and version "2.4.21" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.22 Search vendor "Openldap" for product "Openldap" and version "2.4.22" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.23 Search vendor "Openldap" for product "Openldap" and version "2.4.23" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.24 Search vendor "Openldap" for product "Openldap" and version "2.4.24" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.25 Search vendor "Openldap" for product "Openldap" and version "2.4.25" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.26 Search vendor "Openldap" for product "Openldap" and version "2.4.26" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.27 Search vendor "Openldap" for product "Openldap" and version "2.4.27" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.28 Search vendor "Openldap" for product "Openldap" and version "2.4.28" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.29 Search vendor "Openldap" for product "Openldap" and version "2.4.29" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.30 Search vendor "Openldap" for product "Openldap" and version "2.4.30" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.31 Search vendor "Openldap" for product "Openldap" and version "2.4.31" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.32 Search vendor "Openldap" for product "Openldap" and version "2.4.32" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.33 Search vendor "Openldap" for product "Openldap" and version "2.4.33" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.34 Search vendor "Openldap" for product "Openldap" and version "2.4.34" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.35 Search vendor "Openldap" for product "Openldap" and version "2.4.35" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.36 Search vendor "Openldap" for product "Openldap" and version "2.4.36" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.37 Search vendor "Openldap" for product "Openldap" and version "2.4.37" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.38 Search vendor "Openldap" for product "Openldap" and version "2.4.38" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.39 Search vendor "Openldap" for product "Openldap" and version "2.4.39" | - |
Affected
| ||||||
Openldap Search vendor "Openldap" | Openldap Search vendor "Openldap" for product "Openldap" | 2.4.40 Search vendor "Openldap" for product "Openldap" and version "2.4.40" | - |
Affected
|