CVE-2014-8182
Fixed in a distro release EPSS 3%
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.
Products: openldap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | openldap | 0:2.4.40-5.el6 |
| Red Hat Enterprise Linux 6 | openldap-clients | 0:2.4.40-5.el6 |
| Red Hat Enterprise Linux 6 | openldap-debuginfo | 0:2.4.40-5.el6 |
| Red Hat Enterprise Linux 6 | openldap-devel | 0:2.4.40-5.el6 |
| Red Hat Enterprise Linux 6 | openldap-servers | 0:2.4.40-5.el6 |
| Red Hat Enterprise Linux 6 | openldap-servers-sql | 0:2.4.40-5.el6 |
| Red Hat Enterprise Linux 7 | openldap | 0:2.4.40-8.el7 |
| Red Hat Enterprise Linux 7 | openldap-clients | 0:2.4.40-8.el7 |
| Red Hat Enterprise Linux 7 | openldap-debuginfo | 0:2.4.40-8.el7 |
| Red Hat Enterprise Linux 7 | openldap-devel | 0:2.4.40-8.el7 |
| Red Hat Enterprise Linux 7 | openldap-servers | 0:2.4.40-8.el7 |
| Red Hat Enterprise Linux 7 | openldap-servers-sql | 0:2.4.40-8.el7 |