CVE-2013-4449: CVE-2013-4449

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-4449

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

OpenLDAP ‘rwm_conn_destroy’拒绝服务漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议（LDAP）的自由和开源实现，它已被包含在Linux发行版中。 OpenLDAP 2.4.23版本和2.4.36及之前的版本中的rwm overlay存在安全漏洞，该漏洞源于程序没有正确处理引用计数，造成rwm_conn_destroy释放会话内容。远程攻击者可利用该漏洞造成拒绝服务（slapd崩溃）。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2013-4449

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2013-4449

Please Login to view more intelligence information

🔗 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705x_refsource_CONFIRM
🔗 7723 – slapd crashes on multi core machines if a search request is *immediately* followed by an unbind Read full article x_refsource_CONFIRM
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1019490x_refsource_CONFIRM
🔗 https://support.apple.com/kb/HT210788x_refsource_CONFIRM
🔗 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735x_refsource_CONFIRM
🔗 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlx_refsource_CONFIRM
🔗 http://www.securityfocus.com/bid/63190vdb-entryx_refsource_BID
🔗 http://www.securitytracker.com/id/1029711vdb-entryx_refsource_SECTRACK
🔗 http://www.debian.org/security/2015/dsa-3209vendor-advisoryx_refsource_DEBIAN
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2014:026vendor-advisoryx_refsource_MANDRIVA
🔗 http://rhn.redhat.com/errata/RHSA-2014-0206.htmlvendor-advisoryx_refsource_REDHAT
🔗 http://rhn.redhat.com/errata/RHSA-2014-0126.htmlvendor-advisoryx_refsource_REDHAT
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449vendor-advisoryx_refsource_CISCO
🔗 http://www.openwall.com/lists/oss-security/2013/10/19/3mailing-listx_refsource_MLIST
🔗 http://seclists.org/fulldisclosure/2019/Dec/26mailing-listx_refsource_FULLDISC
🔗 https://seclists.org/bugtraq/2019/Dec/23mailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2013-4449

New Vulnerabilities

Product: n/a

Vendor: n/a

V. Comments for CVE-2013-4449

No comments yet

Support Us — Your donation helps us keep running

I. Basic Information for CVE-2013-4449

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2013-4449

III. Intelligence Information for CVE-2013-4449

New Vulnerabilities

V. Comments for CVE-2013-4449

Leave a comment