CVE-2007-5707

openldap slapd DoS via objectClasses attribute

Published Oct 30, 2007 CVSS 2.0 · 7.1 High EPSS 3.7% KEV · Not listed
Description
OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1541-1 New openldap2.3 packages fix denial of service
EUVD EUVD EUVD-2007-5679 OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.
Ubuntu USN Ubuntu USN USN-551-1 OpenLDAP vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 3:39 PM
Reserved
Oct 30, 2007, 12:00 AM
Status
Modified
Published
Oct 30, 2007, 7:46 PM
Modified
Jun 16, 2026, 10:46 PM
Severity
Important
Public date
Oct 29, 2007, 12:00 AM