// For flags

CVE-2015-6908

OpenLDAP 2.4.42 - ber_get_next Denial of Service

Severity Score

5.3
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

Vulnerabilidad en la función ber_get_next en libraries/liblber/io.c en OpenLDAP 2.4.42 y versiones anteriores, permite a atacantes remotos causar una denegación de servicio (aserción accesible y caída de la aplicación) a través de datos BER manipulados, según lo demostrado por un ataque contra slapd.

A flaw was found in the way the OpenLDAP server daemon (slapd) parsed certain Basic Encoding Rules (BER) data. A remote attacker could use this flaw to crash slapd via a specially crafted packet.

OpenLDAP is an open source suite of Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. The openldap package contains configuration files, libraries, and documentation for OpenLDAP. A flaw was found in the way the OpenLDAP server daemon parsed certain Basic Encoding Rules data. A remote attacker could use this flaw to crash slapd via a specially crafted packet. All openldap users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-09-11 CVE Reserved
  • 2015-09-11 CVE Published
  • 2015-09-11 First Exploit
  • 2024-08-06 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-20: Improper Input Validation
CAPEC
References (20)
URL Tag Source
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=6fe51a9ab04fd28bbc171da3cf12f1c1040d6629 X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html X_refsource_confirm
http://www.security-assessment.com/files/documents/advisory/OpenLDAP-ber_get_next-Denial-of-Service.pdf X_refsource_confirm
http://www.securityfocus.com/bid/76714 Vdb Entry
http://www.securitytracker.com/id/1033534 Vdb Entry
https://support.apple.com/HT205637 X_refsource_confirm
URL Date SRC
https://www.exploit-db.com/exploits/38145 2015-09-11
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=8240 2024-08-06
URL Date SRC
URL Date SRC
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html 2023-11-07
http://rhn.redhat.com/errata/RHSA-2015-1840.html 2023-11-07
http://www.debian.org/security/2015/dsa-3356 2023-11-07
http://www.ubuntu.com/usn/USN-2742-1 2023-11-07
https://access.redhat.com/security/cve/CVE-2015-6908 2015-09-29
https://bugzilla.redhat.com/show_bug.cgi?id=1262393 2015-09-29
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openldap
Search vendor "Openldap"
 Openldap
Search vendor "Openldap" for product "Openldap"
 <= 2.4.42
Search vendor "Openldap" for product "Openldap" and version " <= 2.4.42"
-
Affected
Apple
Search vendor "Apple"
 Mac Os X
Search vendor "Apple" for product "Mac Os X"
 <= 10.11.1
Search vendor "Apple" for product "Mac Os X" and version " <= 10.11.1"
-
Affected