CVE-2013-4449
Fixed in a distro release EPSS 11%
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.
Products: debian_linux, openldap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openldap | 2.4.39-1.1 |
| Debian 13 | openldap | 2.4.39-1.1 |
| Debian 14 | openldap | 2.4.39-1.1 |
| Debian 6.0 | openldap | 2.4.23-7.3+deb6u1 |
| Debian 7 | openldap | 2.4.31-2 |
| Red Hat Enterprise Linux 5 | compat-openldap | 0:2.3.43_2.2.29-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap-clients | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap-debuginfo | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap-devel | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap-servers | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap-servers-overlays | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 5 | openldap-servers-sql | 0:2.3.43-27.el5_10 |
| Red Hat Enterprise Linux 6 | openldap | 0:2.4.23-34.el6_5.1 |
| Red Hat Enterprise Linux 6 | openldap-clients | 0:2.4.23-34.el6_5.1 |
| Red Hat Enterprise Linux 6 | openldap-debuginfo | 0:2.4.23-34.el6_5.1 |
| Red Hat Enterprise Linux 6 | openldap-devel | 0:2.4.23-34.el6_5.1 |
| Red Hat Enterprise Linux 6 | openldap-servers | 0:2.4.23-34.el6_5.1 |
| Red Hat Enterprise Linux 6 | openldap-servers-sql | 0:2.4.23-34.el6_5.1 |
| Ubuntu 14.04 LTS | openldap | 2.4.31-1+nmu2ubuntu8.1 |