CVE-2010-0211
Critical · 9.8CVSS
9.8
EPSS
28.5%
Published
Jul 28, 2010
CISA due date
—
The record
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | openldap | 0 | 2.4.23-1 |
| Debian:12 | openldap | 0 | 2.4.23-1 |
| Debian:13 | openldap | 0 | 2.4.23-1 |
| Debian:5.0 | openldap | 0 | 2.4.11-1+lenny2 |
| Red Hat:enterprise_linux:4::as | compat-openldap | 0 | 0:2.1.30-12.el4_8.3 |
| Red Hat:enterprise_linux:4::as | openldap | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::as | openldap-clients | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::as | openldap-debuginfo | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::as | openldap-devel | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::as | openldap-servers | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::as | openldap-servers-sql | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | compat-openldap | 0 | 0:2.1.30-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | openldap | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | openldap-clients | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | openldap-debuginfo | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | openldap-devel | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | openldap-servers | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | openldap-servers-sql | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | compat-openldap | 0 | 0:2.1.30-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | openldap | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | openldap-clients | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | openldap-debuginfo | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | openldap-devel | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | openldap-servers | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::es | openldap-servers-sql | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | compat-openldap | 0 | 0:2.1.30-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | openldap | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | openldap-clients | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | openldap-debuginfo | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | openldap-devel | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | openldap-servers | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | openldap-servers-sql | 0 | 0:2.2.13-12.el4_8.3 |
| Red Hat:enterprise_linux:5::client | compat-openldap | 0 | 0:2.3.43_2.2.29-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap-clients | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap-debuginfo | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap-devel | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap-servers | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap-servers-overlays | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client | openldap-servers-sql | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | compat-openldap | 0 | 0:2.3.43_2.2.29-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap-clients | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap-debuginfo | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap-devel | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap-servers | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap-servers-overlays | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | openldap-servers-sql | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | compat-openldap | 0 | 0:2.3.43_2.2.29-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap-clients | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap-debuginfo | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap-devel | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap-servers | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap-servers-overlays | 0 | 0:2.3.43-12.el5_5.1 |
| Red Hat:enterprise_linux:5::server | openldap-servers-sql | 0 | 0:2.3.43-12.el5_5.1 |
Related vulnerabilities
- CVE-2023-2953 A vulnerability was found in openldap. Also affects openldap
- CVE-2017-9287 servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free… Also affects openldap
- CVE-2015-6908 The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows… Also affects openldap
- CVE-2014-9713 The default slapd configuration in the Debian openldap package 2.4.23-3 through… Also affects openldap
- CVE-2015-1545 The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through… Also affects openldap
- CVE-2013-4449 The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count… Also affects openldap
- CVE-2012-1164 slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service… Also affects openldap
- CVE-2011-1081 modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a… Also affects openldap