CVE-2012-1164 (GCVE-0-2012-1164)

Vulnerability from cvelistv5 – Published: 2012-06-29 19:00 – Updated: 2024-08-06 18:53
VLAI
Summary
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://security.gentoo.org/glsa/glsa-201406-36.xml vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/49607 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/48372 third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.openldap.org/its/index.cgi/Software%20… x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2012-0899.html vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/52404 vdb-entryx_refsource_BID
http://www.openldap.org/software/release/changes.html x_refsource_CONFIRM
https://support.apple.com/kb/HT210788 x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Dec/23 mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2019/Dec/26 mailing-listx_refsource_FULLDISC
Date Public
2012-06-20 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:53:35.431Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201406-36",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201406-36.xml"
          },
          {
            "name": "49607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49607"
          },
          {
            "name": "48372",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48372"
          },
          {
            "name": "MDVSA-2012:130",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143"
          },
          {
            "name": "RHSA-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0899.html"
          },
          {
            "name": "52404",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52404"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openldap.org/software/release/changes.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT210788"
          },
          {
            "name": "20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Dec/23"
          },
          {
            "name": "20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Dec/26"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-06-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-13T20:06:22.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "GLSA-201406-36",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201406-36.xml"
        },
        {
          "name": "49607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49607"
        },
        {
          "name": "48372",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48372"
        },
        {
          "name": "MDVSA-2012:130",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143"
        },
        {
          "name": "RHSA-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0899.html"
        },
        {
          "name": "52404",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52404"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openldap.org/software/release/changes.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT210788"
        },
        {
          "name": "20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Dec/23"
        },
        {
          "name": "20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Dec/26"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-1164",
    "datePublished": "2012-06-29T19:00:00.000Z",
    "dateReserved": "2012-02-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T18:53:35.431Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2012-1164",
      "date": "2026-05-27",
      "epss": "0.12715",
      "percentile": "0.94089"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.4.29\", \"matchCriteriaId\": \"BE48D5AB-B4B1-4159-8C2D-6F5CB097F16F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5EC66226-A597-4A4C-932F-F4A7BAE119C8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4AEABC84-7B67-4FD4-A891-E52C80DC881E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"340F673A-295E-4B75-A9D1-E785B0440BE6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"49203E99-71E2-49D4-91A0-65AAAA7DC18F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"473AEC48-FBBF-4BEB-8728-1FA80DD94807\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B0415EA-5F21-44C3-93F3-DDADBAA64449\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16AFC655-E81F-4FDE-8030-9781A8B79E73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E99FB859-D023-4B2B-A709-05E83A46E2A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8D2EEBC7-1FAF-43E2-A124-C387C02D9E2B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"95D242E4-D5EB-4785-A6EF-60B1E8E2B0EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F6FEDD9C-FDF7-456A-B06C-0A4A4443991D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9245CDE2-B90A-4D47-BA20-A7869FF0A645\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB993E4D-E573-4495-97DE-465DDB2AA2DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0F106A3-63D5-4D07-9440-6628DBA78BE5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36CC03BC-DF34-43CD-90B0-27D23A1DD06A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16C90FEE-527E-47F5-8840-517A55163D8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0FAEA812-BB47-47A3-A975-B3B8D30DBA36\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5DE5D180-3972-40A0-ADAF-A4F3364D1381\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.24:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD76F376-00D8-4917-BF68-6EECC316C331\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.25:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F7063C11-3BF5-4037-ADC3-0C7E9AF830B4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CAE258EA-1B57-4189-AD5A-7E2ACF223167\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.27:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C492F5F5-A6FD-4BED-890A-79254138CC0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openldap:openldap:2.4.28:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6F7FDE8-2E54-4162-AA5F-D81253AAC8FA\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.\"}, {\"lang\": \"es\", \"value\": \"slapd de OpenLDAP anteriores a 2.4.30 permite a atacantes remotos provocar una denegaci\\u00f3n de servicio (fallo de aserci\\u00f3n y finalizaci\\u00f3n del demonio) a trav\\u00e9s de una petici\\u00f3n de b\\u00fasqueda LDAP con attrsOnly asignado a \\\"true\\\", lo que provoca que atributos vac\\u00edos sean devueltos.\"}]",
      "id": "CVE-2012-1164",
      "lastModified": "2024-11-21T01:36:34.260",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:N/I:N/A:P\", \"baseScore\": 2.6, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 4.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2012-06-29T19:55:03.327",
      "references": "[{\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-0899.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://seclists.org/fulldisclosure/2019/Dec/26\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/48372\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/49607\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-201406-36.xml\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2012:130\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.openldap.org/software/release/changes.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/52404\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://seclists.org/bugtraq/2019/Dec/23\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://support.apple.com/kb/HT210788\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-0899.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://seclists.org/fulldisclosure/2019/Dec/26\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/48372\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/49607\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-201406-36.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2012:130\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.openldap.org/software/release/changes.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/52404\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://seclists.org/bugtraq/2019/Dec/23\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.apple.com/kb/HT210788\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2012-1164\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-06-29T19:55:03.327\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.\"},{\"lang\":\"es\",\"value\":\"slapd de OpenLDAP anteriores a 2.4.30 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (fallo de aserci\u00f3n y finalizaci\u00f3n del demonio) a trav\u00e9s de una petici\u00f3n de b\u00fasqueda LDAP con attrsOnly asignado a \\\"true\\\", lo que provoca que atributos vac\u00edos sean devueltos.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:N/I:N/A:P\",\"baseScore\":2.6,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":4.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.4.29\",\"matchCriteriaId\":\"BE48D5AB-B4B1-4159-8C2D-6F5CB097F16F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EC66226-A597-4A4C-932F-F4A7BAE119C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AEABC84-7B67-4FD4-A891-E52C80DC881E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"340F673A-295E-4B75-A9D1-E785B0440BE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49203E99-71E2-49D4-91A0-65AAAA7DC18F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"473AEC48-FBBF-4BEB-8728-1FA80DD94807\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B0415EA-5F21-44C3-93F3-DDADBAA64449\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16AFC655-E81F-4FDE-8030-9781A8B79E73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E99FB859-D023-4B2B-A709-05E83A46E2A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D2EEBC7-1FAF-43E2-A124-C387C02D9E2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95D242E4-D5EB-4785-A6EF-60B1E8E2B0EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6FEDD9C-FDF7-456A-B06C-0A4A4443991D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9245CDE2-B90A-4D47-BA20-A7869FF0A645\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB993E4D-E573-4495-97DE-465DDB2AA2DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0F106A3-63D5-4D07-9440-6628DBA78BE5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36CC03BC-DF34-43CD-90B0-27D23A1DD06A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16C90FEE-527E-47F5-8840-517A55163D8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FAEA812-BB47-47A3-A975-B3B8D30DBA36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DE5D180-3972-40A0-ADAF-A4F3364D1381\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD76F376-00D8-4917-BF68-6EECC316C331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7063C11-3BF5-4037-ADC3-0C7E9AF830B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAE258EA-1B57-4189-AD5A-7E2ACF223167\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C492F5F5-A6FD-4BED-890A-79254138CC0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openldap:openldap:2.4.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6F7FDE8-2E54-4162-AA5F-D81253AAC8FA\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0899.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2019/Dec/26\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/48372\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/49607\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201406-36.xml\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2012:130\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.openldap.org/software/release/changes.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/52404\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://seclists.org/bugtraq/2019/Dec/23\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://support.apple.com/kb/HT210788\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0899.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2019/Dec/26\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/48372\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/49607\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201406-36.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2012:130\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.openldap.org/software/release/changes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/52404\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://seclists.org/bugtraq/2019/Dec/23\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT210788\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…