Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenLDAP modrdn请求内存破坏漏洞
Vulnerability Description
OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议（LDAP）的自由和开源实现，它已被包含在Linux发行版中。 OpenLDAP的servers/slapd/modrdn.c文件中的slap_modrdn2mods()函数没有检查smr_normalize()的返回值，远程攻击者可以通过发送包含有特制rdn字符串的modrdn请求释放未初始化的指针，导致内存破坏。
CVSS Information
N/A
Vulnerability Type
N/A