CVE-2012-1164
Fixed in a distro release EPSS 4%
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
Products: openldap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openldap | 2.4.31-1 |
| Debian 13 | openldap | 2.4.31-1 |
| Debian 14 | openldap | 2.4.31-1 |
| Debian 6.0 | openldap | 2.4.23-7.3+deb6u1 |
| Red Hat Enterprise Linux 6 | openldap | 0:2.4.23-26.el6 |
| Red Hat Enterprise Linux 6 | openldap-clients | 0:2.4.23-26.el6 |
| Red Hat Enterprise Linux 6 | openldap-debuginfo | 0:2.4.23-26.el6 |
| Red Hat Enterprise Linux 6 | openldap-devel | 0:2.4.23-26.el6 |
| Red Hat Enterprise Linux 6 | openldap-servers | 0:2.4.23-26.el6 |
| Red Hat Enterprise Linux 6 | openldap-servers-sql | 0:2.4.23-26.el6 |
| Ubuntu 14.04 LTS | openldap | 2.4.31-1+nmu2ubuntu8.1 |