Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenLDAP NOOP control 拒绝服务漏洞
Vulnerability Description
OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议(LDAP)的自由和开源实现,它已被包含在Linux发行版中。 OpenLDAP的实现上存在多个漏洞,远程攻击者可能利用这些漏洞导致应用进程崩溃。 OpenLDAP的servers/slapd/overlay/pcache.c文件中的add_filter_attrs()函数没有正确地处理空字符结尾的new_attrs,这可能触发越界内存访问导致slapd崩溃。成功攻击要求slapd用作了缓存代理服务器。此外如果向服务器发送了畸形的objec
CVSS Information
N/A
Vulnerability Type
N/A