Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-6908

Опубликовано: 11 сент. 2015
Источник: nvd
CVSS2: 5
EPSS Высокий

Описание

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*
Версия до 2.4.42 (включая)
Конфигурация 2
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Версия до 10.11.1 (включая)

EPSS

Процентиль: 99%
0.72592
Высокий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
почти 10 лет назад

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

redhat
почти 10 лет назад

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

debian
почти 10 лет назад

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 ...

suse-cvrf
больше 9 лет назад

Security update for openldap2

github
больше 3 лет назад

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

EPSS

Процентиль: 99%
0.72592
Высокий

5 Medium

CVSS2

Дефекты

CWE-20