CVE-2015-1546
Fixed in a distro release EPSS 3%
Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.
Products: openldap, opensuse, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openldap | 2.4.40-4 |
| Debian 13 | openldap | 2.4.40-4 |
| Debian 14 | openldap | 2.4.40-4 |
| SUSE Linux Enterprise Desktop 12 | openldap2-client | 2.4.39-16.1 |
| SUSE Linux Enterprise Module for Legacy 12 | openldap2 | 2.4.39-16.1 |
| SUSE Linux Enterprise Server 12 | openldap2 | 2.4.39-16.1 |
| SUSE Linux Enterprise Server 12 | openldap2-client | 2.4.39-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openldap2 | 2.4.39-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openldap2-client | 2.4.39-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 | openldap2 | 2.4.39-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 | openldap2-client | 2.4.39-16.1 |