Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenLDAP 'overlays/pcache.c'函数远程拒绝服务攻击漏洞
Vulnerability Description
OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议（LDAP）的自由和开源实现，它已被包含在Linux发行版中。 OpenLDAP的实现上存在拒绝服务攻击漏洞，OpenLDAP的servers/slapd/overlay/pcache.c文件中的add_filter_attrs()函数没有正确地处理空字符结尾的new_attrs，这可能触发越界内存访问导致slapd崩溃。成功攻击要求slapd用作了缓存代理服务器。
CVSS Information
N/A
Vulnerability Type
N/A