Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    USN-2622-1 (UBUNTU-CVE-2012-1164)

    Vulnerability from osv_ubuntu – Published: 2015-05-26 17:45 – Updated: 2026-04-22 07:36 – Source website
    VLAI
    Summary
    openldap vulnerabilities
    Details

    It was discovered that OpenLDAP incorrectly handled certain search queries that returned empty attributes. A remote attacker could use this issue to cause OpenLDAP to assert, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-1164)

    Michael Vishchers discovered that OpenLDAP improperly counted references when the rwm overlay was used. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2013-4449)

    It was discovered that OpenLDAP incorrectly handled certain empty attribute lists in search requests. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2015-1545)

    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2013-4449",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-1545",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ldap-utils",
            "binary_version": "2.4.31-1+nmu2ubuntu8.1"
          },
          {
            "binary_name": "libldap-2.4-2",
            "binary_version": "2.4.31-1+nmu2ubuntu8.1"
          },
          {
            "binary_name": "slapd",
            "binary_version": "2.4.31-1+nmu2ubuntu8.1"
          },
          {
            "binary_name": "slapd-smbk5pwd",
            "binary_version": "2.4.31-1+nmu2ubuntu8.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "openldap",
        "purl": "pkg:deb/ubuntu/openldap@2.4.31-1+nmu2ubuntu8.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.31-1+nmu2ubuntu8.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.31-1+nmu2ubuntu3",
        "2.4.31-1+nmu2ubuntu4",
        "2.4.31-1+nmu2ubuntu5",
        "2.4.31-1+nmu2ubuntu8"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that OpenLDAP incorrectly handled certain search queries\nthat returned empty attributes. A remote attacker could use this issue to\ncause OpenLDAP to assert, resulting in a denial of service. This issue only\naffected Ubuntu 12.04 LTS. (CVE-2012-1164)\n\nMichael Vishchers discovered that OpenLDAP improperly counted references\nwhen the rwm overlay was used. A remote attacker could use this issue to\ncause OpenLDAP to crash, resulting in a denial of service. (CVE-2013-4449)\n\nIt was discovered that OpenLDAP incorrectly handled certain empty attribute\nlists in search requests. A remote attacker could use this issue to cause\nOpenLDAP to crash, resulting in a denial of service. (CVE-2015-1545)\n",
  "id": "USN-2622-1",
  "modified": "2026-04-22T07:36:32Z",
  "published": "2015-05-26T17:45:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2622-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2012-1164"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-4449"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-1545"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "openldap vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2012-1164",
    "UBUNTU-CVE-2013-4449",
    "UBUNTU-CVE-2015-1545"
  ]
}